October 2000 - cypherpunks-legacy

CDR: Dealing with Spam from Esther Dyson
by Tim May 28 Oct '00

28 Oct '00

So, Esther Dyson, whom I have never corresponded with, is spamming me with this crap. Any suggestions from Cypherpunks on how to deal with this nuisance? I'm not sure she needs killing, despite her criminal acts with ICANN, but other suggestions are welcome. --Tim May At 10:55 AM -0400 10/27/00, Esther Dyson wrote: >Dear Tim May, > >Intellectual Property on the Net (12/94), the implications of the >Web on privacy in Labels and Disclosure, Part II: Privacy (2/97), >The Open-Source Revolution (11/98), broadband open access in The >Architecture of Internet 2.0 (2-99), new content models in The Web >Goes into Syndication (7-8/99), peer-to-peer networking in Data >Soup: The Client is the Server (4/00). If you were reading Release >1.0, you would have read about these topics early. > >That's the mission of Release 1.0, the monthly newsletter I produce >with editor Kevin Werbach. We take pleasure not just in filtering >the huge amount of news, announcements and products and services >that this market produces, but in figuring out what emerging trends >mean for you before your competitors do. > >Subscribe online today at ><http://www.release1-0.com>www.Release1-0.com and join the other >industry leaders who stay ahead of the curve with an annual >subscription to Release 1.0. For only $795 you will get: > >* 11 monthly issues, >* a Release 1.0 binder in which to file them, >* the PC Forum 2000 transcript (a $300 value), and >* a FREE special-edition Release 1.0 baseball cap. > >Kevin and I fill Release 1.0 with insights on the latest >technologies and the companies that are forging our future. For 15 >years, we've consistently nailed the big ideas and big trends before >they've become the vogue. Isn't it time you joined such industry >leaders as John Doerr, Mary Meeker, Ray Ozzie, Marc Andreessen, >Michael Dell, Jim Barksdale, Ann Winblad, Martin Nisenholtz, Eric >Schmidt and Bill Joy as a Release 1.0 subscriber? > >Visit <http://www.release1-0.com>www.Release1-0.com now and complete >the online subscription form. Be sure to use 900ER1 as your personal >marketing code to get this great offer. > >**Sign up before November 15 and get your PC Forum 2001 invitation >with your November issue.** > >At Release 1.0, we will continue to lead the conversation and to >keep it lively. I hope you ll join us. What we write about now will >start to matter sooner than you think! > >Sincerely yours, > >Esther Dyson >Editor-in-Chief, Release 1.0 > >P.S. If you would prefer not to receive any further information >about EDventure's activities, please let Joanna >(<mailto:joanna@edventure.com>joanna(a)edventure.com) in my office >know and we will be sure to remove you from our list. -- ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 831-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, "Cyphernomicon" | black markets, collapse of governments.

4 5

CDR: Dealing with Spam from Esther Dyson
by Tim May 28 Oct '00

28 Oct '00

By the way, a few minutes with Google turned up other instances of Esther Dyson's spamming. Here's just one such URL, along with the opening paragraphs: http://channel.nytimes.com/1998/03/28/technology/28dyson.html March 28, 1998 I Got Spammed by Esther Dyson: Release, the Old-Fashioned Way By LISA NAPOLI ecently, I got a note from the publisher of Release 1.0, the venerable newsletter put out by the venerable (and mythic) godmother of all things digital, Esther Dyson. It wasn't a casual e-mail. It wasn't a letter asking me to write for the newsletter. It wasn't even a personal note asking me to have lunch, or attend her annual conference (which took place this week in Tucson, where, for the first time, non-Release subscribers were permitted to attend.) The note was plain old-fashioned snail mail spam, asking me to fork over nearly 700 bucks for a subscription. Dear Lisa, Esther Dyson and Jerry Michalski believe that someone who's achieved your stature in our industry should be part of the Release 1.0 family. That's why they've suggested I write this letter to you. Stature? How did they measure that? Did Jerry Michalski remember sitting at the same table with me at a conference luncheon once? Did Esther ever read my now deceased column, Hyperwocky? Did some computer notice my name on all those mailing lists?

2 1

CDR: Oh Gawd, Tim May...
by George＠Orwellian.Org 27 Oct '00

27 Oct '00

Tim May just spammed the list with a message from Esther Dyson, as if asking for help. Tim May needs killing.

2 1

CDR: Insurance: My Last Post
by Nathan Saper 27 Oct '00

27 Oct '00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Here is my last post in this thread, because I feel that it is going nowhere: My views are irreconcilable with those of the libertarians on this list. Here's the way I view the world: 1) Life has no inherent value. Our being here is random, and there is no purpose to our lives. 2) "Human progress" is bullshit. We are no further along as a species now than we were in Plato's time. Basically, we're going nowhere fast. 3) People have no essential "rights." Rights don't exist. This is a theme often found in the work of many modern philosophers, such as Foucault. 5) Taking all three premises above, the only way I can find to evaluate what is right and what is wrong is "do what causes the least pain." I guess this is basically pragmatism. For example, if raising taxes to 95% would feed everyone in the world (I'm just speaking hypothetically), then I would advocate this, because this would lead to less pain in the world. (And I don't consider some people having to sell their Ferraris "pain." ;-) Someone here said that each time taxes are raised, we lose freedom. So what? First of all, what is "freedom"? Second of all, what is so great about it that it should be evaluated before everything else? So I guess when people say "but by making the insurance companies pay for the medical care, you are stealing from them," my answer is "So what?" I understand that this way of viewing the world is not shared by many on this list, so it seems that it would be damn near impossible for us to reach agreement. - -- Nathan Saper (natedog(a)well.com) | http://www.well.com/user/natedog/ GnuPG (ElGamal/DSA): 0x9AD0F382 | PGP 2.x (RSA): 0x386C4B91 Standard PGP & PGP/MIME OK | AOL Instant Messenger: linuxfu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE59oRA2FWyBZrQ84IRAlgUAJ9y2Tjn0jqwpSyxZD7wQW+UGQi5dQCfczrz 5fXnbFxhPFVfaFbiPu2/KNQ= =ijeO -----END PGP SIGNATURE-----

4 6

CDR: more wild things
by billp＠nmol.com 27 Oct '00

27 Oct '00

http://www.geocities.com/CapitolHill/Congress/8327/load1.html

1 0

CDR: Enjoy the ride!!!!!!!
by info0809＠myered.com 27 Oct '00

27 Oct '00

1 0

CDR: Re: Mac created the modern Internet
by Ulf Möller 27 Oct '00

27 Oct '00

I'm sure that Mac users added to the momentum, but don't forget online services like AOL and CompuServe. They started offering Internet mail and Usenet access in 1993, and as people started sending URLs around, they inevitably had to offer online access as well.

6 7

None
by Alin Werner 27 Oct '00

27 Oct '00

Dear Sir, For the begineing please allow me to introduce myself. My name is Werner Alin. I am a graduate student who has started a small company along with four others.We are only four but with a very good organization we can keep a high standard. It all started with a simple observation: most of the computer system produceing companies didn't made personalised computers. They only sell already made systems. So we found out that a segment of the computer system market is almost uncovered. As you might know all the Romanian market is still under developement. Despite the fact that we have found a big buisness oportunity we have encontered a problem. Since almost all the resellers here produce computer systems the prices for computer hardware are very high. Our only solution is to look for resellers ousite Romania. We have established only a few contacts but with encoureging results. As you might know, in the past there have been some companies in Romania who had took advantage of the helping hand that foreign companies gave them, but I can asure you that all has ended in the past. A hard legislation and the strong hand of the authorties ended the fraud in the computer industry. The fact that we represent the new generation differentiates us from thouse companies. As I said earlier we have established a few contacts outside Romania but we think that there is room for better. Due to the fact we do not pay taxes for computer hardware imports all that interests us is the price of the components and the cost of shipping. We usualy chouse for shipping fast couriers like UPS, DHL, FedEx. The most used payment methos are wire transfer but we can use as a fast payment methoh credit cards. If you think that we can aquire from you computer hardware components please send us a catalog or a price list. We will compare your prices with the prices of our other distributioners and if your price is better we will choose to buy from you the computer hardware that we need for our systems. In our quest for best prices we are now looking on the internet. We haven't yet bought a domain becaouse we still are evaluating the opportunities that the internet gives us, but you can find a site about us, still under developent, at : romcomp.angelfire.com. If you have any sugestions, advises about our site or about haw to establishe conections with foreign trades please contact me. I hope my e-mail didn't bored you and I expect ypur answer. Werner Anlin Director Manager of RomComp P.S. Please forgive any spelling errors _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com.

1 0

CDR: Come back to pogo.com!
by comeback＠pogo.com 27 Oct '00

27 Oct '00

Dear cypherpunk0, We've missed you! You signed up for our FREE games and prizes, but we haven't seen you on the site in a while. We're inviting you to come back to pogo.com and see all the fun you've been missing. To show how much we care, we'll give you 250 tokens AND a chance to win $500.00 in CASH just for coming back. Account name: cypherpunk0 Password: password Your Token Balance: 1000 Check out some of our newest and most popular games: Bank Buster Lotto(tm) - crack the safe combination and you could take home ONE MILLION DOLLARS! What more do we need to say - it's a chance to win ONE MILLION DOLLARS! Ali Baba Slots(tm) - chat with friends while you win tokens. Get 3 Genies and win the jackpot! This is one of our most popular games; over 500,000 people played in the first month! Buckaroo Blackjack(tm) - blackjack with a twist! Win tokens while you play. Get the Gold Ace and Jack and win the jackpot! This is another of our most popular games; over 300,000 people played in the first month! Jump to the games! Go to: http://play.pogo.com/ten/misc/welcome-back.jsp?site=pogo AOL members, <a href="http://play.pogo.com/ten/misc/welcome-back.jsp?site=pogo">click here to jump to the games</a>! To unsubscribe from all future pogo.com mailings, go to: http://play.pogo.com/ten/unsubscribe/remove-e-mail.jsp?pid=18619444&site=po…

1 0

CDR: Re: Insurance: My Last Post
by Nathan Saper 27 Oct '00

27 Oct '00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, Oct 25, 2000 at 03:24:35PM -0500, Kevin Elliott V wrote: > > > > Hash: SHA1 > > > > Here is my last post in this thread, because I feel that it is going > > nowhere: > > > > My views are irreconcilable with those of the libertarians on this > > list. Here's the way I view the world: > > > > 1) Life has no inherent value. Our being here is random, and > > there is no purpose to our lives. > > > > 2) "Human progress" is bullshit. We are no further along as a > > species now than we were in Plato's time. Basically, we're > > going nowhere fast. > > > > 3) People have no essential "rights." Rights don't exist. > > This is a theme often found in the work of many modern > > philosophers, such as Foucault. > > > > 5) Taking all three premises above, the only way I can find to > > evaluate what is right and what is wrong is "do what causes the > > least pain." I guess this is basically pragmatism. For > > example, if raising taxes to 95% would feed everyone in the > > world (I'm just speaking hypothetically), then I would advocate > > this, because this would lead to less pain in the world. (And > > I don't consider some people having to sell their Ferraris > > "pain." ;-) Someone here said that each time taxes are raised, > > we lose freedom. So what? First of all, what is "freedom"? > > Second of all, what is so great about it that it should be > > evaluated before everything else? > > The best answer I can give to this is to suggest you read "On Liberty" by > John Stuart Mill. The theory you espouse in five, by the way, is > utilitarianism though it is normally phrased in the positive "the greatest > happiness for the greatest number" rather than the negative as you have > expressed it. I am fairly familar with utilitarian thought. My specific form of utilitarianism is act utilitarianism, which means that each individual action is evaulated, instead of using utilitarian ideas to form a complete system of moral thought. The reason why I use "the least pain for the greatest number" instead of "the greatest happiness for the greatest number" is because the latter justifies many not-so-great acts under act utilitarianism. Consider this example: There is going to be a Sado-Masachism (sp?) convention, which will be attended by 10,000 S&M-ers. They kidnap a poor person, bring him to their convention, and electrically shock him. This delights the crowd, but devastates the poor person. Under the common definition of utilitarianism, this act is justified because it pleasures 10,000, while hurting only 1. However, under my definition, this act is not justified because it creates a lot of pain, whereas not doing it does not create any pain. > It was originally formulated by a gentleman by the name of > Jeremy Bentham, but is most associated with Mill who studied under Bentham > and is responsible for a number of works on the subject. Mill is also > most responsible for clarifying and revising it counter the easy arguments > against it. Most interesting however for your interest, however, is "On > Liberty" which clearly and concisely explains why the greatest happiness > for the greatest number results from a society where government > intervention (and thievery) is minimized and people are left to there own > devices. > And I disagree with him. - -- Nathan Saper (natedog(a)well.com) | http://www.well.com/user/natedog/ GnuPG (ElGamal/DSA): 0x9AD0F382 | PGP 2.x (RSA): 0x386C4B91 Standard PGP & PGP/MIME OK | AOL Instant Messenger: linuxfu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard <http://www.gnupg.org/> iD8DBQE593Mq2FWyBZrQ84IRAvwkAKCaEAI8fHh+q3ZyWPqUe8UTFdd0YQCfR5nc MXVzyvMqF/YoUWtx+QyDbig= =4ChW -----END PGP SIGNATURE-----

4 5

CDR: RE: Paranoid Encryption Standard (was Re: Rijndael & Hitachi)
by Carskadden, Rush 27 Oct '00

27 Oct '00

Cool. I have to think about this some more and see if I can provide you with a proof either way, but for now you're right. I am operating entirely on conventional wisdom. That is not sound. My assumption here (offered for your opinion) is that provided a working knowledge of the actual ciphers and a copy of the key (compromised through a weakness in one of the ciphers), that I could use that same key, along with the respective decryption algorithms, to completely unravel all of the encryption. Granted, step-by-step analysis would almost definitely not include plaintext related attacks (as deciphered text from one algorithm simply results in unobfuscated text resulting from the previously implemented cipher), but my knee-jerk reaction here is to think that if one could compromise the last cipher applied and derive the key, then the entire scheme would be blown. If this is the case, then the strength of the entire cipher is only as strong as it's weakest link. On the other hand, I would think that some chain of ciphers that all used different keys (preferably not derivative) would seem stronger to me. At any rate, please keep me posted on your thoughts. ok, Rush Carskadden -----Original Message----- From: Arnold G. Reinhold [mailto:reinhold@world.std.com] Sent: Friday, October 27, 2000 3:20 PM To: Carskadden, Rush; Damien Miller Cc: John Kelsey; Bram Cohen; cryptography(a)c2.net; cypherpunks(a)cyberpass.net Subject: RE: Paranoid Encryption Standard (was Re: Rijndael & Hitachi) At 1:00 PM -0500 10/27/2000, Carskadden, Rush wrote: >Are you guys still talking about the feasibility of a cipher that >implements each AES candidate in turn with the same key? I don't >really get this idea. Provided you were actually using the same key >with each stage of the encryption, then your system is only gong to >be as secure as the key of the first algorithm. In fact, it seems >that if the key is compromised at any one point, then the entire >system is shot, given that you know the algorithm (Kerckhoff's >principle IIRC). Maybe I am misunderstanding. > That is the theoretical question that I am asking. What you say appears to be the conventional wisdom, and I am claiming that it is wrong. As long as there is some way to make sure that none of the ciphers in a chain are inverses of the others, or close to an inverse, in some sense, then I claim as long as one of the ciphers is strong, there is no way to get any information out about the keys from the other ciphers, even if they are all designed to reveal that information. As a practical matter, you may as well derive the sub keys from the master key using a one-way hash, but I am questioning the theoretical justification for doing that. Massey and Maurer base their paper on oracles that give you the key for all component ciphers but one. I am saying such oracles cannot exist if one of the ciphers is strong and "inverses" of the strong cipher are excluded. Arnold Reinhold

1 0

CDR: Test
by Annette＠Hosting.Matters 27 Oct '00

27 Oct '00

Life is like a box of chocolates; except for spammers who should be killed.

1 0

CDR: AT LAST!!!! BULK-FRIENDLY WEB HOSTING
by nobody＠hotmail.com 27 Oct '00

27 Oct '00

I found this incredible service called HOSTING MATTERS. Hosting Matters is a fantastic way to host adult and bulk email-friendly sites with NO WORRIES about getting shut down as they are only out to try and make money. The service is VERY CHEAP and I reccomend it for the following types of sites: - Bulk emailing - Adult content & services - Controversial/Hate sites As far as I know, they have NEVER shut down above-mentioned types of sites! For more info contact them on the web site below. http://www.hostmatters.com or an alternative URL: http://www.hostingmatters.com Contact sales(a)hostmatters.com or call TOLL-FREE on 1-877-381-1083 if you have any questions.

1 0

CDR: Congratulations on your $25 USD win!
by owner-cypherpunks＠toad.com 27 Oct '00

27 Oct '00

You are a winner !!! Your email was randomly selected from our opt-in lists and you won $25.00 USD in real casino chips from A1-Casino. Why are they giving away money you ask? Simple...they want you to discover what 1,000's of other people just like you already know...online gambling at A1-Casino is fast-paced, interactive and a whole lot of fun. But that's not all, they are also giving away fabulous instaprizes and bonuses during the download. So don't wait. Click on the link below to collect your $25.00 prize now. http://www.click-collect.com If the link above doesn't work please print, fill in and fax this form to the fax number below. First Name ____________________ Last Name ____________________ Street Address ________________________________________________ City ____________________ State/Province ______________________ Country _________________ ZIP/Postal Code _____________________ E-Mail _________________________________ ############## Send fax to: 1-775-766-2022 ############## ***************************************************************************** Delivered by Segasolution to referrals and opt-ins only. All remove requests are honored. All players must be 18 years and over. Bonus dollars are only available to credit card depositors. A1-Casino guarantees minimum wins. Good luck! ***************************************************************************** Remove mailto:unsubscribeit@softhome.net

1 0

CDR: RE: Congress proposes raiding census records.
by Lucky Green 27 Oct '00

27 Oct '00

I only answered the first question in the last census: how many people live at that address (or something to that effect). The rest I crossed out with fat black permanent marker. The result: no visits from the census taker. No inquiries from the Census Office. No fine. No repercussions of any kind. I am puzzled why anybody would have bothered to answer the remaining questions. --Lucky Green <shamrock(a)cypherpunks.to> "Anytime you decrypt... its against the law". Jack Valenti, President, Motion Picture Association of America in a sworn deposition, 2000-06-06 > -----Original Message----- > From: cypherpunks(a)openpgp.net [mailto:cypherpunks@openpgp.net]On Behalf > Of Trei, Peter > Sent: Tuesday, October 24, 2000 14:07 > To: Multiple recipients of list > Subject: Congress proposes raiding census records. > > > Let us remember that the last time the privacy of > census records were violated on this scale, > they were used to imprison tens of thousands > of law abiding American citizens, whose only > crime was to have Japanese ancestry. > > Peter Trei > > ------------- > > http://www.nytimes.com/2000/10/23/opinion/23MONK.html > (free registration required) > > New York Times, 23 October, 2000 > > My Data, Mine to Keep Private > > By LINDA R. MONK > > WASHINGTON -- I was one of those paranoid Americans > who chose not to answer all questions on the long form of > the 2000 census. My husband and I decided that the > government did not need to know, or had other ways of > finding out, what time we left for work, how much our > mortgage payment was or the amount of our income that came > from wages. We were willing to risk the $100 fine to take a > stand for individual privacy in an increasingly nosy and > automated age. > > Editorial writers across the nation chided people like us > for being so silly, insisting that only right-wing nuts with > delusions of jackbooted federal invaders could possibly > object to the census. Think of all the poor women who need > day care and disabled people who depend on public > transportation, we were told. And don't listen to the > warnings of Trent Lott, the Senate majority leader - > they're just another Republican ploy to get a low count on > the census. > > Now, however, my concerns don't appear quite so > ridiculous. The Congressional Budget Office, with the > surprising help of some Congressional Republicans, is > angling to get its hands on Census Bureau files. The budget > office wants to create a "linked data set" on individuals - > using information from the Internal Revenue Service, Social > Security Administration and Census Bureau surveys - to help > it evaluate proposed reforms in Medicare and Social > Security. > > Under current law, census data on individuals can be used > only to benefit the Census Bureau, which has balked at > turning over files to the budget office without greater > assurances of individual privacy. However, the Congressional > number crunchers are not taking no for an answer. > Republicans may tack an amendment allowing Congress access > to census data onto an appropriations bill before Congress > adjourns for the elections. > > The records the budget office wants are not themselves from > the 2000 Census; they are voluntary responses to monthly > surveys, with confidentiality promised. Forcing the bureau > to give them up would set a disturbing precedent. Commerce > Secretary Norman Mineta, who supervises the Census Bureau, > warned Congress this month that amending the census law > would "seriously compromise" the department's ability to > safeguard taxpayers' privacy and "to assure continued high > response rates of the American public to census surveys." > > Chip Walker, a spokesman for Representative Dan Miller, a > Florida Republican who chairs the House subcommittee on the > census, sees no problem with congressional access to census > data. "The Census Bureau is the government, and Congress is > the government," he said. > > Well, that's exactly what I'm afraid of. It's not surprising > that a federal agency that stockpiles information would be > raided by other federal agencies. If Congress changes the > census law, the government will be well on its way to > becoming another Amazon.com, which abruptly and > retroactively weakened its privacy policy this year. I > expected as much, because I don't believe either the > government or businesses when they promise me > privacy. That's why I routinely lie about personal > information when applying for shoppers' discount cards and > the like. And it's why I don't answer invasive questions on > census forms. Keep your hands off my data set. > > >

11 12

CDR: Net Privacy Bill Called 'Trojan Horse'
by auto87114＠hushmail.com 27 Oct '00

27 Oct '00

Net Privacy Bill Called 'Trojan Horse' By Robert O'Harrow Jr, Washington Post WASHINGTON, DC, U.S.A., 25 Oct 2000, 6:14 AM CST The legislation began as an effort to protect people like Amy Boyer, a New Hampshire woman who was slain by a man who tracked her down after buying her Social Security number on the Internet. In May, Sen. Judd Gregg, R-N.H., proposed a law to sharply limit the sale of the identifying numbers, which often serve as hooks for electronic dossiers about the whereabouts, credit histories and lifestyles of millions of Americans. Then the information industry got involved. Now privacy advocates say Gregg's modified measure, part of an appropriations bill set to pass in the final days of Congress, is a "Trojan horse" that does more harm than good, because loopholes allow giant data brokers, banks, marketers and even private detectives to exchange or sell the numbers among themselves. That means such companies will be free to use the numbers to track down debtors or deadbeat parents, collect personal data, conduct fraud investigations, and build profiles about what people buy and do. The debate is the latest flare-up over one of the staples of the information age, a number that enables government agencies, marketers and information brokers to keep close tabs on a proliferation of data about individual Americans. Some privacy activists believe that Social Security numbers should be used only with individuals' permission. At the same time, information industries that rely on unfettered access to personal information fear losing control over a key to their business. "It is just the worst kind of legislation," said Edmund Mierzwinski, consumer advocate at the US Public Interest Research Group, who has worked with Consumers Union, the American Civil Liberties Union and the Clinton administration to oppose Gregg's proposal. "It is supposed to do something good, but it actually makes things worse." Tim Remsburg, Amy Boyer's stepfather, who originally asked Gregg to introduce the bill, is angry about how it evolved. "It sure isn't as effective as what I asked for at the beginning," he said in an interview. "They want to put Amy's name on this." A Gregg spokesman defended the legislation, saying it will make it illegal to sell Social Security numbers to individuals. But he acknowledged that the current legislation was crafted with help from the Individual Reference Services Group (IRSG), an industry association that includes some of the nation's largest data marketers. Members include such companies as Acxiom Corp., Equifax Inc. and Trans Union LLC, which have strongly opposed any efforts to curb access to personal data. IRSG representative Ronald Plesser, who worked with Gregg's office on the legislation, did not return repeated telephone calls. In a Sept. 28 letter to Gregg's office, Plesser blasted more stringent restrictions proposed by the Clinton administration. A letter from IRSG said, "Your bill strikes the right balance by providing strong privacy protections without undermining the range of important and socially beneficial activities by business and government that have developed based upon the use of SSNs." One exception also would permit state and local governments to continue selling records containing Social Security numbers. The provision is worded in such a way that, critics say, it would allow businesses buying those records to use Social Security numbers with no legal restraints. Remsburg's stepdaughter, Amy Boyer, 20, was fatally shot last year by a man who had been stalking her for some time. The man, who killed himself after killing Boyer, acknowledged at a Web site that he obtained details about Boyer from brokers on the Internet. "It's a significant restriction on the ability of individuals to get Social Security numbers," said Gregg spokesman Edmund M. Amarosi. "We feel it will have a significant impact on preventing a recurrence of what happened to Amy Boyer." In a statement, Gregg's office said that "the exceptions that are outlined in the Amy Boyer Law were the result of thoughtful consideration of the impact that a complete ban on the use of Social Security numbers would have on our nation's economy." Until recently, at the request of industry, the law also prohibited states from enacting tougher legislation. But Amarosi said that exception would be dropped because of objections from the administration and others. Copyright (C) 2000, The Washington Post. Reprinted with permission. Reported By The Washington Post, http://www.washingtonpost.com .

1 0

CDR: Re: FC: U.S. Copyright Office says DeCSS bad, filtering hacking good
by Nick Bretagna 27 Oct '00

27 Oct '00

Declan McCullagh wrote: > > ----- Forwarded message from John Young <jya(a)pipeline.com> ----- > The two exemptions granted: > > "1. Compilations Consisting of Lists of Websites Blocked > by Filtering Software Applications > > 2. Literary Works, Including Computer Programs and > Databases, Protected by Access Control Mechanisms > That Fail to Permit Access Because of Malfunction, > Damage or Obsoleteness." So: our free speech -- our ability to express ideas -- is now subject to the imprimature of the US copyright office, who we need to appeal to for "exemptions"?? How many *other* Federal Agencies do you think will step forth to claim this power, as well??? One would certainly hope the courts would figure this one out as blatantly unconstitutional.... > > The copyright industry's arguments are often cited > as grounds for minimal exemptions, as well as the > power of the market to correct what Congress gave > the industry. Specious. -- --- --- --- --- --- --- --- --- --- --- --- Nicholas Bretagna II mailto:afn41391@afn.org If we give in [to the impulse to censor and instill speech codes] then we are giving to the bigots the gift of our freedom. If you give in, what you're saying is that Freedom is less important than not being offended. What a disaster for a country whose *soul* depends on Liberty. - Alan C. Kors -

1 0

CDR: Re: Rijndael & NTRU
by Vin McLellan 27 Oct '00

27 Oct '00

On Mon, 2 Oct 2000, Vin McLellan <me> wrote: >> Apparently the selection of Rijndael -- pronounced "Reign Dahl" or "Rain >> Doll" -- was not a big surprise to everyone. >> >> Just got a note from Scott Crenshaw, the CEO of NTRU Cryptosystems >> (<www.ntru.com>, one of the firms I consult for), expressing satisfaction at >> having "backed the right horse" while others dozed;-) Paulo Barreto <paulo.barreto(a)terra.com.br> quipped: >Or it might not have occurred to everyone to prepare just-in-case releases for >each of the finalists and wait for NIST's verdict ;-) Yeah, I thought of that too;-) The NTRU folk, however, didn't wait for today's announcement to place their bet. The NTRU reference implementation for embedded systems -- the NERI toolkit the company has been shipping for a couple of months -- includes Rijndael code described as "an excellent complement to our core public key technology." Anyone know of any other commercial firms (other than the respective developers) which made an overt pre-announcement commitment to one of the AES candidates? Apparently the fact that Rujndael was the/a leading AES candidate was apparent to some prescient souls (not me <sigh>) at least since AES3 in N.Y. last April. As Bram Cohen <bram(a)gawth.com> put it: .> The selection of Rijndael was actually quite predictable - the round 2 .> report made it pretty clear that the only real contenders were Rijndael .> and Twofish, and hey, that last coin toss is free with 20/20 hindsight :) Suerte, _Vin

14 24

CDR: Re: Parties
by An Metet 27 Oct '00

27 Oct '00

God, what a bunch of shit. The only thing that is really going to make a difference is a suitcase nuke or a balloon full of Ebola virus on Washington. There's about a 1/4 million assholes all over the country that need to be hunted down and killed after that. Then we will have freedom and privacy. Write your congress critter about that.

1 0

CDR: LOSE 30 POUNDS IN 30 DAYS, GUARANTEED!
by UltraTrim2000＠excte.com 27 Oct '00

27 Oct '00

*****AMAZING MELT AWAY FAT ABSORBER CAPSULES***** LOSE 30 POUNDS IN 30 DAYS... GUARANTEED!!! All Natural Weight-Loss Program, Speeds Up The Metabolism Safely Rated #1 In Both Categories of SAFETY & EFFECTIVENESS In (THE USA TODAY) WE'LL HELP YOU GET THINNER IN WINTER!!! WE'RE GOING TO HELP YOU LOOK GOOD, FEEL GOOD AND TAKE CONTROL IN 2000 ***** Receive 1 Free Bottle Of Ultra Trim 2000 & Your Bonus Supply, With Every Order Of 2 Or More Bottles. Offer Good Until November 12, 2000! ***** WE GLADLY SHIP TO ALL FOREIGN COUNTRIES! You will be losing by tomorrow! Don't Wait, visit our web page below, and join now! ***************** http://weightlossworld.50megs.com/intro.html ***************** This is the easiest, fastest, and most effective way to lose both pounds and inches permanently!!! This weight loss program is designed specifically to "boost" weight-loss efforts by assisting body metabolism, and helping the body's ability to manage weight. A powerful, safe, 30 Day Program. This is one program you won't feel starved on. Complete program for one amazing low price! Program includes: BONUS AMAZING FAT ABSORBER CAPSULES, 30 DAY - WEIGHT REDUCTION PLAN, PROGRESS REPORT, AND MUCH MORE!!! SPECIAL BONUS..."FAT ABSORBERS", AS SEEN ON TV With every order...AMAZING MELT AWAY FAT ABSORBER CAPSULES with directions (1 Month Supply, Absolutely Free ) ...With these capsules you can eat what you enjoy, without the worry of fat in your diet. 2 to 3 capsules 15 minutes before eating or snack, and the fat will be absorbed and passed through the body without the digestion of fat into the body. You will be losing by tomorrow! Don't Wait, visit our web page below, and join now! ***************** http://weightlossworld.50megs.com/intro.html ***************** ___1 Month Supply $32.95 plus $3.75 S & H, 100 Amazing MegaTrim Capsules. ___2 Month Supply $47.95 plus $3.75 S & H, 200 Amazing MegaTrim Capsules. (A $9.95 Savings, Free Bottle)! ___3 Month Supply $62.95, Plus $3.75 S & H, 300 Amazing MegaTrim Capsules. (A $19.90 Savings, Free Bottle)! To Order by postal mail, please send to the below address. Make payable to MegaTrim. Ultra Trim 2000 4132 Pompton Ct. Dayton, Ohio 45405 (937) 567-9807 Order by 24 Hour Fax!!! (775) 414-7455 ***** Important Credit Card Information! Please Read Below! * Credit Card Address, City, State and Zip Code, must match billing address to be processed. CHECK____ MONEYORDER____ VISA____ MASTERCARD____ AmericanExpress___ Debt Card___ Name_______________________________________________________ (As it appears on Check or Credit Card) Address____________________________________________________ (As it appears on Check or Credit Card) ___________________________________________________ City,State,Zip(As it appears on Check or Credit Card) ___________________________________________________ Country ___________________________________________________ (Credit Card Number) Expiration Month_____ Year_____ *****IMPORTANT NOTE***** If Shipping Address Is Different From The Billing Address Above, Please Fill Out Information Below. Shipping Name______________________________________________ Shipping Address___________________________________________ ___________________________________________________________ Shipping City,State,Zip ___________________________________________________________ Country ___________________________________________________________ Email Address & Phone Number(Please Write Neat)

1 0

CDR: Pré-Lançamento de A Caverna
by apoio＠giganetstore.com 27 Oct '00

27 Oct '00

<http://www.giganetstore.com/> <http://www.giganetstore.com/index.asp?produtoId=7316> A Giganetstore.com tem o prazer de lhe apresentar a última obra do Escritor José Saramago Seja o primeiro a entrar em " A Caverna " Disponível a partir de 16 de Novembro Não hesite e Encomende Já ! <http://www.giganetstore.com/index.asp?produtoId=7316> Os primeiros 20 clientes a comprarem A Caverna de José Saramago, terão direito a 1 convite para o lançamento do livro, que contará com a presença do Nobel da Literatura. <http://www.giganetstore.com/index.asp?produtoId=7316> A Caverna José Saramago Uma Pequena Olaria, um centro comercial gigantesco. Um mundo em rápido processo de extinção, outro que cresce e se multiplica como um jogo de espelhos onde não parece haver limites para a ilusão enganosa. Este Romance fala de um modo de viver que vai sendo cada vez menos o nosso e assoma-se à entrada de um brave new world cujas consequências sobre a mentalidade humana são cada vez mais visíveis e ameaçadoras. Todos os dias se extinguem espécies animais e vegetatis, todos os dias há profissões que se tormam inúteis, idiomas que deixam de ter pessoas que os falem, tradições que perdem sentido, sentimentos que se convertem nos seus contrários. Fim de século, fim de milénio, fim de civilização.Uma família de oleiros compreende que deixou de ser necessária ao mundo. Como uma serpente que despe a pele para poder crescer noutra que mais adiante se há-de tornar pequena, o centro comercial diz à olaria : " Morre já não preciso de ti ". Em A Caverna José Saramago enfrenta-se ao processo acelerado de desumanização que estamos vivendo, com dois romances anteriores Ensaio Sobre a Cegueira <http://www.giganetstore.com/index.asp?produtoId=7161> e Todos os Nomes <http://www.giganetstore.com/index.asp?produtoId=7165> - este novo livro forma um tríptico em que o Autor deixou inscrita a sua visão do mundo actual, da sociedade humana tal como a vivemos. Não mudaremos de vida se não mudarmos a vida. O Autor <http://www.giganetstore.com/imgmail/Jose_saramago.htm> <http://www.giganetstore.com/imgmail/Jose_saramago.htm> Obras Publicadas <http://www.giganetstore.com/imgmail/Jose_saramago.htm#1> <http://www.giganetstore.com/imgmail/Jose_saramago.htm#1> Aproveitamos para o informar que estamos a ampliar o nosso catálogo na categoria de Livros, e que neste momento, também já contamos com a presença da Editora Caminho. Para retirar o seu email desta mailing list deverá entrar no nosso site http://www.giganetstore.com <http://www.giganetstore.com> , ir à edição do seu registo e retirar a opção de receber informação acerca das nossas promoções e novos serviços.

1 0

CDR: paycash payment system ver. 1.xx
by R. A. Hettinga 27 Oct '00

27 Oct '00

--- begin forwarded text

1 0

CDR: DMCA Final Rule
by John Young 27 Oct '00

27 Oct '00

We offer the US Digital Millennium Copyright Act Final Rule on Access Control Circumvention: http://cryptome.org/dmca102700.txt (149KB) An excerpt on why there will be no exemption for circumventing access to DVDs by tools such as DeCSS: http://cryptome.org/dmca-dvd.htm (15KB) The two exemptions granted: "1. Compilations Consisting of Lists of Websites Blocked by Filtering Software Applications 2. Literary Works, Including Computer Programs and Databases, Protected by Access Control Mechanisms That Fail to Permit Access Because of Malfunction, Damage or Obsoleteness." The copyright industry's arguments are often cited as grounds for minimal exemptions, as well as the power of the market to correct what Congress gave the industry. Specious.

1 0

CDR: Denver Judge rules Cops can seize bookstore records
by No User 27 Oct '00

27 Oct '00

"If we can save but one child from the awful scourge of drugs..." Of course, the real issue here is why the bookstore was keeping such personalized records in the first place. -------- Judge: Cops can seize bookstore records http://www.denverpost.com/news/news1021b.htm By Susan Greene Denver Post Staff Writer Oct. 21, 2000 - Police will be allowed to search customer purchase records at the Tattered Cover Book Store to investigate a narcotics case, a Denver judge ordered Friday. Civil libertarians decried the order - believed to be the first of its kind nationwide - for protecting law enforcement's ability to obtain evidence over individual rights to read without interference from authorities. Tattered Cover owner Joyce Meskis said the order could have a "chilling effect" on the First Amendment and on store patrons, who might hesitate to buy books knowing that police have access to their purchase records. She is considering an appeal. "A bookstore is a house of ideas," she said. "We certainly have the responsibility to protect customers' rights to those ideas, and the right to privacy that goes along with that." Law enforcers hailed the order as a victory. "If it only takes one or two records from a bookstore to help us eliminate drugs on the street, then so be it," said Lt. Lori Moriarty, commander of the North Metro Drug Task Force, which is seeking the Tattered Cover records. "We need all the tools possible to help law enforcement do its job." The controversy stems from a March 14 raid on an Adams County mobile home in which task force members found a methamphetamine lab and two books: "The Construction and Operation of Clandestine Drug Laboratories" by "Jack B. Nimble," and "Advanced Techniques of Clandestine Psychedelic and Amphetamine Manufacture" by "Uncle Fester." Investigators also found a bookshipping envelope containing an invoice number from the Tattered Cover in Lower Downtown Denver. They are hoping bookstore records will help pinpoint which of the six people who frequented the mobile home bought the books and, presumably, operated the lab. The task force first sought a search warrant from the Adams County district attorney's office, which rejected the request partially on grounds that executing it would give police a public relations "black eye." Task force members then turned to the Denver DA's office, which granted the warrant. Meskis blocked police from going through her store's records, saying they should instead use other investigative measures such as fingerprinting to find their suspect. Denver District Court temporarily blocked the task force from seizing the records, pending the outcome of a hearing before Judge Stephen Phillips. Most states have laws protecting public libraries from police searches except under exceptional circumstances, but there is no special law that protects bookstores. The issue made headlines in 1998, when independent counsel Kenneth Starr subpoenaed two Washington, D.C., bookstores for information on gifts exchanged between President Clinton and White House intern Monica Lewinsky. Barnes & Noble and Kramerbooks hired lawyers and challenged the subpoena in federal court. A federal judge quashed Starr's request for the records. Lewinsky, meantime, agreed to testify in exchange for immunity, rendering the whole issue moot. Still, the case was a watershed for bookstore owners and privacy advocates, who have been watching the Tattered Cover's legal battle with intense interest. Phillips, in his order, recognized the First Amendment right to "receive information and ideas, regardless of social worth," but he cited a legal balancing test weighing such rights against the importance of law enforcement to investigate crimes. Phillips ruled that the identity of the drug lab operators is "of significant public interest" and that "the purchase of how-to books is a highly important piece of evidence." The judge wrote that there's no other reasonable way, aside from seizing store records, for investigators to obtain the information they're seeking. He lauded the task force for asking only for specific invoices, not "stumbl(ing) through other private records." Phillips deemed the Tattered Cover case "dramatically different" than the Lewinsky case, about which he wrote: "The subpoenas were exploratory in nature, and the government was unable to show any need nor any nexus to a criminal event." And so Phillips denied investigators' broad request for a month's worth of records that might show all titles purchased by the unnamed suspects. Still, he granted police access to the specific invoice whose number appeared on the book mailer. Meskis has 15 days to appeal before the task force seizes her records. Moriarty insists it was never her unit's intent to comb through reading records of the general public. Rather, she said, Phillips' order will give investigators "an important piece of a puzzle" needed to nab their suspect. Critics say one arrest is a high price to pay for allowing a war against drugs to chip away at civil rights. "Key principles of the right to privacy and freedom of speech have ultimately been compromised in the decision," said Sue Armstrong, executive director of the American Civil Liberties Union in Colorado. Judith Krug, director of the Office for Intellectual Freedom at the American Library Association, said she worries that drug investigators unfairly are "making the connection between what people read and what they do." "Just because you read a book on homosexuality, for example, doesn't mean you're gay. And reading a book on the symptoms of cancer doesn't mean you have the disease," Krug said. "Our concern is that what people read, what goes into their heads will no longer remain private." KEY QUESTIONS: Denver District Judge Stephen Phillips posed four key questions as part of a legal balancing test in his ruling: 1. Is there a legitimate and significant government interest in acquiring the information? 2. Is there a strong nexus between the matter being investigated and the material being sought? 3. Is the information available from another source? 4. Is the intrusion limited in scope so as to prevent exposure of other constitutionally protected matters? Copyright 2000 The Denver Post. All rights reserved. Related: Bookstore fights search warrant http://www.denverpost.com/news/news1018d.htm

5 4

256-bit keys (was Re: Paranoid Encryption Standard)
by Paul Crowley 27 Oct '00

27 Oct '00

John Kelsey <kelsey.j(a)ix.netcom.com> writes: > Probably not too much, in terms of worrying about > known-plaintext vs. chosen-plaintext attacks. Though > honestly, I think designing your PES is like providing > really effective padlocks for screen doors. (But you could > say the same thing about AES with 256-bit keys.) I agree on both counts. But I can see another use for larger keys than resisting brute force attack: they increase the difficulty of attacks on protocols and constructions based on inducing collisions in keys. -- __ \/ o\ paul(a)cluefactory.org.uk /\__/ http://www.cluefactory.org.uk/paul/

1 0