December 2001 - cypherpunks-legacy

Re: Cypherpunk Ban
by Anonymous 03 Jan '02

03 Jan '02

I am seriously considering to fund printing of inet-one digest in local newspaper/rag that CJ can pick up. On a weekly basis. I'd like to see if pigs will dare fuck him for reading newspapers. Any pointers to local papers appreciated.

8 8

Applied Digital pushes microchip to plant in foreigners for tracking
by Jei 03 Jan '02

03 Jan '02

---------- Forwarded message ---------- Date: Sat, 22 Dec 2001 08:59:21 +0100 From: Mario Profaca <Mario.Profaca(a)zg.tel.hr> Reply-To: spynews-owner(a)yahoogroups.com To: "[Spy News]" <spynews(a)yahoogroups.com> Subject: [Spy News] Applied Digital pushes microchip to plant in foreigners for tracking http://www.gopbi.com/partners/pbpost/epaper/editions/today/business_c312779d 0594902e00ee.html Palm Beach Post Thursday, December 20, 2001 Applied Digital pushes microchip to plant in foreigners for tracking By Deborah Circelli, Palm Beach Post Staff Writer PALM BEACH -- Today's security measures don't work very well, says Richard Sullivan, pointing to the Sept. 11 terror attacks on New York and Washington. He's says he's got a better idea: a microchip instead of a green card. Foreigners who pass through customs or immigration could be injected with the chip, allowing officials to monitor their activities better and keep terrorists out. "Man today is more than ever converging with technology," said Sullivan, who is CEO of the Palm Beach-based tech company Applied Digital Solutions (Nasdaq: ADSX, 45 cents). "I think the positives overwhelmingly overcome any small negatives. The government is more prepared, for the overall benefit of our citizens, to advocate some of these changes." Sullivan's company has high hopes for the implantable technology, which it unveiled Wednesday. Until now, the microchips -- called VeriChips -- have been used for tracking and identifying animals. Applied Digital has had a patent for such devices since 1999. The new technology would make Applied Digital the first company in the nation to sell microchips designed to be implanted in human beings. But privacy groups reacted with outrage Wednesday to Sullivan's idea for monitoring foreigners. America is not that desperate, one group said, citing a violation of "bodily integrity." "That is so unconstitutional," said Randall Marshall, legal director for the Miami chapter of the American Civil Liberties Union. "I can't imagine this surviving a constitutional challenge. It just simply goes way too far outside the realm of what we believe in as a society." Sullivan said the product will be marketed in January in South America while the company seeks approval in the United States from the Food and Drug Administration. Approval is expected in 18 months. A New Jersey surgeon who serves on the board of Owings, Md.-based Medical Advisory Systems, which is about to combine with a subsidiary of Applied Digital, injected himself with two of the VeriChips five days after the terror attacks. Richard Seelig inserted the chips in his forearm and hip as part of the clinical process Applied Digital will have to conduct to receive FDA approval, Sullivan said. Seelig, 55, referred all questions Wednesday to Sullivan but told the Los Angeles Times he felt compelled to have a secure form of identification after Sept. 11. "I was so compelled by what had happened," Seelig told the Times. "One of the potential applications suddenly jumped out -- the ability to have a secure form of identification -- and I felt I had to take the next step." The chips are about the size of a grain of rice and contain an identification number or other data, such as medical information, and a person's address and phone number. The chips have no internal power source. Their data can't be read without a scanner close at hand. The next generation of body chips -- one that transmits signals from a distance -- is several years away. The chip is the same as the one Applied Digital's subsidiary uses in more than 1 million animals, but the VeriChip can be used in humans with a pacemaker, artificial heart valves or orthopedic knee devices. If a patient needs help, a hospital can use a scanner to obtain information. In five years, Sullivan said he can see the chips being used in children, the elderly, prisoners, and by employers at facilities such as airports and nuclear plants. Society in general could use them instead of ATM or credit cards, he said. But Evan Hendricks, editor and publisher of Privacy Times, a Washington, D.C.-based newsletter, said it's one thing for an individual to choose to implant the device for medical purposes, but it's crossing the line when parents start putting them in their children or employers require them for employment. "This has been science fiction for most of our adult life, but now we see the technology allows it," Hendricks said. "The problem is that it is happening in a vacuum where there are not adequate privacy laws." /Los Angeles Times contributed to this story./ mailto:deborah_circelli@pbpost.com --- This mail, sent by Mario Profaca, is clean, certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.310 / Virus Database: 171 - Release Date: 19. 12. 01 ------------------------ Yahoo! Groups Sponsor ---------------------~--> Send FREE Holiday eCards from Yahoo! Greetings. http://us.click.yahoo.com/IgTaHA/ZQdDAA/ySSFAA/TySplB/TM ---------------------------------------------------------------------~-> =============================================================== SPY NEWS is OSINT newsletter and discussion list associated to Mario's Cyberspace Station http://mprofaca.cro.net/mainmenu.html =============================================================== *** FAIR USE NOTICE. This message contains copyrighted material whose use has not been specifically authorized by the copyright owner. Spy News is making it available without profit to SPY NEWS eGroup members who have expressed a prior interest in receiving the included information in their efforts to advance the understanding of intelligence and law enforcement organizations, their activities, methods, techniques, human rights, civil liberties, social justice and other intelligence related issues, for non-profit research and educational purposes only. We believe that this constitutes a 'fair use' of the copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use this copyrighted material for purposes of your own that go beyond 'fair use,' you must obtain permission from the copyright owner. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------------------------------- SPY NEWS home page: http://groups.yahoo.com/group/spynews To change your subscription mode to Daily Digest (one message a day) send a blank message: mailto:spynews-digest@yahoogroups.com Please note that replying to THIS e-mail will not remove you from the mailing list. To unsubscribe SPYNEWS send a blank message: mailto:spynews-unsubscribe@yahoogroups.com Mario Profaca Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/

3 2

Illusional delusions
by AARG! Anonymous 03 Jan '02

03 Jan '02

The solution for money laundering is to remove the "money", as defined by the state, from the equation. Crypto removes the content from everyones's eyes except the two parties that communicate. That is what crypto can do. The moment one wants to convert some bits to state-money she is doomed. If you want to rely/convert at any point to the state-money you will become a money launderer/terrorist/whatever. There is simply no way around this. Paper cash is not a solution, since it is observable. Anything observable is not a solution. This is a fundamental problem - not unlike futile attempts to stop copying the content one can hear or see, or to invent foolproof watermarks. Instead, we need a new principle that will not include state-money in any form or shape. Thinking aloud ... this may be silly: Let's start from something that works - secret key message exchange, maybe enhanced with PK key exchange for the carefree. A person, by defintion, trusts itself, so currency known only to the two parties should be reasonably safe. Every pair of traders have their own currency. A disbalance (A owes B but C owes A) is resolved by creating new B-C currency. There is no anonymity, but the network is hardly connected and therefore reasonably safe. The system is hardly new but it was never done in software AFAIK. You never do business with someone whose reputation you can't instrument. But someone can start a business for reputation building. Again, hardly new. This doesn't enable global trade, but frankly I don't care. I don't gain much from it anyway. Going through a series of intermediaries to buy some fine Afghan pot is a small price to pay for getting out of the state's sight. In other words, with small transistors and digsigs there is no need for centralised money at all. No more mainframes, thank you. Big business will suffer, but somehow I don't feel sad. So, tell me, is this silly ?

5 4

Re: End-to-end encrypting US GSM phones?
by Ryan Lackey 02 Jan '02

02 Jan '02

I'm unclear why Lucky dislikes the Sectra Tiger (www.sectra.se) the key management is not what I'd like, but seems designed specifically for hierarchical military or corporate organizations, which is the only viable market for a EUR 2500 encrypting cellphone. I think the most cost-effective voice crypto solution today is a bluetooth-enabled cellphone, a bluetooth-enabled PocketPC (ipaq) with fast ARM, and then conventional encrypted-voice software (such as speak-freely) running over PPP over bluetooth. It would be fairly easy to develop a belt or briefcase cellphone, handheld PDA with audio I/O via headset worn on the belt or held in the hand (or, using an Ericsson headset, stored in a briefcase as well), . System cost USD 1000 or less, entirely COTS consumer hardware and open-source software, and you get a free normal GSM cellphone, high-spec PDA (==ecash terminal), and equivalent ease of use to the very best cellphone (as you would be using a headset, carrying the phone and processor separately). If you're concerned about rf monitoring on the local bluetooth side, you could substitute a wired headset/microphone; if you're concerned about the general unavailability of bluetooth-enabled fast PDAs, you could with an ease of use penalty use IrDA. I don't believe a dragonball could do viable voice crypto (especially compression), at least without a coprocessor card, but perhaps it could, and it certainly could support encrypted SMS. You could possibly use your own non-standard link protocol, vs. PPP, if you are concerned about latency, but it should be relatively easy to achieve 100-200ms latency on cell to cell communications. The benefit of using software which exists on general purpose machines and TCP/IP over the link is of course that normal desktops could be used as secure phone terminals as well, and I think there really isn't much demand for voice crypto in the marketplace, outside the military and defense-mandated commercial contractor use. When audio I/O-enabled PDAs, bluetooth cellphones, etc. are widely deployed, perhaps this will change (plus, bluetooth or 802.11b PDAs could serve as cordless phones with IP-IP or VoIP calling when in range of a legitimate or borrowed network). I've used speak-freely on a unix laptop for years, using IP transport of opportunity, and with a good headset/microphone, it seems to meet my needs for secure voice. The other reason for using PPP-Voice is to abuse cell providers; in the UK, for instance, I have a GBP 75/month unlimited-calling phone (UK numbers); I could easily use this to dial in to a UK-based phone with HSCSD and a fast IP connection at 14.4kbps, and then use IP-IP or a VoIP bridge to get cheaper or free international calling; encrypted by default to the gateway, and possibly to the other end if supported. -- Ryan Lackey [RL7618 RL5931-RIPE] ryan(a)havenco.com CTO and Co-founder, HavenCo Ltd. +44 7970 633 277 the free world just milliseconds away http://www.havenco.com/ OpenPGP 4096: B8B8 3D95 F940 9760 C64B DE90 07AD BE07 D2E0 301F

4 3

Re: End-to-end encrypting US GSM phones?
by Ryan Lackey 02 Jan '02

02 Jan '02

Quoting Trei, Peter <ptrei(a)rsasecurity.com>: > Ryan suggested earlier that the Ipaq with Fireball isn't up to the task. > I don't think this is correct. I point you to > > http://www.stanford.edu/class/cs344/staff/group10/final_report.pdf > > in which some Stanford students produce a wireless ipaq2ipaq > VoIP system. Biggest problem is that it's simplex, not because > of cpu limitations but rather that the Compaq HW can listen or > make noise, but not both simultaneously. Using a headset which > interfaces through the expansion port might enable you to > avoid this problem (and the BT headset could also offload the > codec). A 206 MHz Ipaq would, I think have sufficient HP to > do the crypto. > I didn't mean the imply the Ipaq CPU (200MHz StrongARM) would be insufficient, merely that from usability standpoint. The "holy grail" would be working on 16-33MHz *dragonball* (== 68000) processors. *That* would be impressive. Doing this on a strongarm is easy. I'm not sure what the audio output from the ericsson bluetooth headset is, when it connects to a PDA. I've asked Monty (the ogg guy) and some others, and they think a 50MHz ARM7 is more than sufficient for the compression; getting it down a 33MHz 68000 (like in the recent high-end palm devices) would be cool. > I've toyed with the idea of porting SpeakFreely to Ipaq, but have > not actually done anything at this point. > > I've x-posted to coderpunks, since that group is more germane. > Serious further discussion should be over there, IMHO. > > Peter Trei > > > > > > > > > ============================================================================ > ================ > This e-mail, its content and any files transmitted with it are intended > solely for the addressee(s) and are PRIVILEGED and > CONFIDENTIAL. Access by any other party is unauthorized without the express > prior written permission of the sender. If > you have received this e-mail in error you may not copy, disclose to any > third party or use the contents, attachments or > information in any way, Please delete all copies of the e-mail and the > attachment(s), if any and notify the sender. > Thank You. > ============================================================================ > ================ > > -- Ryan Lackey [RL7618 RL5931-RIPE] ryan(a)havenco.com CTO and Co-founder, HavenCo Ltd. +44 7970 633 277 the free world just milliseconds away http://www.havenco.com/ OpenPGP 4096: B8B8 3D95 F940 9760 C64B DE90 07AD BE07 D2E0 301F

3 3

Re: Choices of small handguns
by Faustine 02 Jan '02

02 Jan '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matthew wrote: >Keep in mind that Glocks, while excellent, reliable and accurate do >lead the pack in accidental discharges, even among "trained" police. >I'd not recommend the Glock to a beginner or to someone who wouldn't >put in the necessary practice. Hey now, I might not exactly be Belle Starr, but if I weren't planning on making a serious effort toward doing it right I wouldn't have bothered. Point well taken though. Thanks to all for the excellent advice and recommendations. I'm sure it's worth taking the time to try them all before deciding, thanks again for a more solid place to start. ~Faustine. *** He that would make his own liberty secure must guard even his enemy from oppression; for if he violates this duty he establishes a precedent that will reach to himself. - --Thomas Paine -----BEGIN PGP SIGNATURE----- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. (Diffie-Helman/DSS-only version) iQA/AwUBPDDjj/g5Tuca7bfvEQJD1gCfV5jY1iMbuSOt0yjpY9ctfnHH4wsAoOg8 x0se+9r6JOoiFtV+fsWZk1/8 =6puB -----END PGP SIGNATURE-----

2 1

Re: cell phone guns
by Faustine 02 Jan '02

02 Jan '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eric wrote: >22 caliber four-shot pistol hidden inside a cell phone, uncovered >during police raids in Europe. >"Cell phone users will have to be made aware that reaching for their >phones in some circumstances could be misinterpreted as a threat by >authorities" Not surprising, since cell phone holster decoys have been around for ages. Why settle for a .22 when you could be packing a Glock 30? Like this... Holster Solutions Concealed Carry for Today's Lifestyle "Now you can own the same, comfortable, and accessible holster that intelligence agencies, security forces, and professional bodyguards worldwide have had for years! Our patented Executive Series Holsters look exactly like a cellular phone and pager that are nicely held in a durable, quality leather case." http://www.holstersolutions.com/product.htm ~F. *** He that would make his own liberty secure must guard even his enemy from oppression; for if he violates this duty he establishes a precedent that will reach to himself. - --Thomas Paine -----BEGIN PGP SIGNATURE----- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. (Diffie-Helman/DSS-only version) iQA/AwUBPC0GGfg5Tuca7bfvEQLJ6wCgvWZbxuctVpvYLNXk7Ih6Fg3+ODEAnjga OBgbpDcvOXTZxld+dwwJgLNM =3d6c -----END PGP SIGNATURE-----

6 9

Reg - Linotype copyright action on Adobe-format fonts
by Bill Stewart 02 Jan '02

02 Jan '02

"ATM" is "Adobe Type Manager". Linotype is a big font house. Intellectual Property laws for fonts are normally even stranger than for regular material, but if any of these are in Postscript, they're also programs, so there may be DMCA issues, and there's obviously some contractual relationship with Adobe that lets them copyright implementations. (I have *no* idea if there's Dmitri Sklyarov-related material here, as in "Did Adobe do Something Bad, or was Someone Else careless", but it's entertaining speculation, at least in the absence of actual knowledge.) Does anybody know ATM implementation details? Adobe's web page describes ATM Light as a "Free font utility for viewing and printing PostScript fonts Adobe. Type Manager. (ATM.) Light is a system software component that automatically generates high-quality screen font bitmaps from the PostScript. outlines in Type 1 or OpenType. format." which implies that at least some ATM fonts are real Postscript. Fairly usable Fair Use reformatted excerpt from The Register's article follows. http://www.theregister.co.uk/content/4/23427.html Linotype gets heavy over free ATM font downloads By John Lettice - john.lettice(a)theregister.co.uk Posted: 17/12/2001 at 12:15 GMT German company Linotype Library GmbH is flexing its ATM font copyright muscles via 'cease and desist' letters with potential $30,000 legal tabs attached. The fonts in question do seem to be owned by Linotype (or to be strictly accurate, its parent company Heidelberger Druckmaschinen AG), but are probably part of a batch that accidentally wandered into the shareware sector in the early 90s. The fonts are frequently found for download on OS/2 sites, and have tended to propagate via mirrors, with the assumption that they're shareware propagating along with them. This was the case for Ian Manners, who runs www.os2site.com, and who contacted The Register after receiving his letter from Linotype. .... What does seem clear is that Linotype is making heavy legal noises in order to clear the fonts off download sites. And strangely enough, the fonts themselves (Cascade, Flora, Frutiger, Helvetica, Isadora, Linotext, Linoscript, Optima, Palatino, Peignot, Present, Shelley and Univers), are currently on sale at Linotype Library's site. The fonts Ian was hosting complicate matters further, in that internally they have an Adobe copyright stamp in them. Adobe itself sells the fonts in question, and labels them as Linotype's trademark on its site. It seems fairly clear that the fonts are Linotype's property, and that even people offering cloned versions under the same names are going to be vulnerable to legal threats. From the Linotype letter, however, it doesn't seem to be the case that they're universally trademarked throughout the world, which could make actual legal action complicated.

6 9

the Mexican woman who followed her heart
by Artcamp SC de RL 01 Jan '02

01 Jan '02

Artcamp is now presenting it's serialized e-novel "Azucena" at http://groups.yahoo.com/group/indigenous_peoples_literature/messages You are very welcome to join this group if you want to follow the story. Azucena is the Mexican woman who followed her heart on the road to her destiny, wherever that way leads. This is the "true" story, transformed by art, of a village girl whose heart was stolen by a macho bull-rider. Best friendly wishes from Guerrero Mexico Maria de los Angeles Robles Uribe http://www.artcamp.com.mx _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

2 1

Re: Clarification for cpunks_anon@einstein.ssz.com
by Faustine 01 Jan '02

01 Jan '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jim wrote: > Modify your text style; review favorite words or phrases and > avoid them completely. If possible run your text through a > translation service (eg source -> Spanish -> source) and then > edit the resultant. If you do use an online translation service > use an anonymizing service for this access as well. This is a great point, but it's worth remembering that even your opinions themselves can be used to find you. Real example (details changed for privacy): I have a friend who used to write for a financial magazine whom I wanted to get in touch with again. I had no idea which aliases he was using, so the first thing I did was look up a few keywords related to a current subject that, if he were still posting, he was unlikely to resist: dollarization and the financial crisis in Argentina. I knew his opinions on other subjects well enough to pick him out of a crowd, but chose Argentina first, since not many people posting online are well-informed and passionate enough to get a first-class tirade going about it. Hear somebody rant about something a couple of times and you know what to look for. Sure enough, I found him on the very first search, railing away and breathing fire as anticipated, almost as if on cue. All I had to do was jump right in the conversation and trot out my own crotchety old hobbyhorses in my own style...that afternoon, I got a "hey Faustine, is that really you?" message. He was quite pleased with himself to have found me! Harmeless enough, but I'm sure you can think of more sinister applications. Anyone who is really passionate about specialist subjects is at a distinct disadvantage to Joe and Jane Sixpack, whose opinions are largely interchangable and indistinguishable within various broad parameters. (How else could marketing turn this sickening conformity and predictability into a science?) Take an inventory of all the unusual things that push your buttons--the opinions that make you unique--and you'll be a step ahead. ~Faustine. *** He that would make his own liberty secure must guard even his enemy from oppression; for if he violates this duty he establishes a precedent that will reach to himself. - --Thomas Paine -----BEGIN PGP SIGNATURE----- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. (Diffie-Helman/DSS-only version) iQA/AwUBPDDZXPg5Tuca7bfvEQLpzgCgjs3DdbAyVjc+PD3iuD7R05naS/0AoKA3 ycqyfa7L9uPDUqqC5epGmOo1 =eNIe -----END PGP SIGNATURE-----

4 3