December 2003 - cypherpunks-legacy

Re: PGP in Eudora and other mail programs
by Joel McNamara 17 Dec '03

17 Dec '03

>I suspect that John-Doe will go through the normal new-product cycle -- >discovery of bugs, slight improvements, and then better integration of user >needs. Ultimately, as the product matures, I think that Steve's John Doe >will be seen as a revolutionary development in privacy equal to (in a far >less technical but more end-user way) PZ's original PGP. I really don't want to blow my own horn, but Private Idaho is much more than a PGP shell. It has supported remailer operations since it first appeared nearly a year ago. It also started supporting the c2 nym server several months ago. With no disrespect meant to tallpaul or Steve, I hardly think John Doe is revolutionary. I certainly don't consider Private Idaho to be anything other than an efficient, free shell for Windows users to enhance their privacy. And, I have yet to see a crypto/privacy "killer app." I am glad though, to see that other people are going beyond PGP shells and starting to write privacy-oriented applications that use the remailers and nym servers. Keeps me on my toes with new Private Idaho features. But more importantly, the more tools that are out there, the more people will be using them. I've always maintained that the interface is the gating factor to the wide-spread adoption of a technology. Joel

1 0

Re: PGP in Eudora and other mail programs
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Will wonders ever cease. PGP-in-Eudora-for-Mac.... Cheers, Bob Hettinga -----BEGIN PGP SIGNED MESSAGE----- Sometimes even the gods are wrong... ;-) >> A few years later, still no PGP-in-Eudora. One would think that this would >> be a powerful way of distinguishing their product from other mail packages. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMQgXKPgyLN8bw6ZVAQGvdwQAoiWetK6FRmvMqRnB1mXG+94zqRNOHz7C j8u6huNvp13N29ml2JaDcJtW67SvBKqLrkA2/k26eJM98bMpeDJtm8rAlO/zbgKO zmicy7hQSFbh9U6jxuFgzwSVofxYtvzuVk9I0cqgmp7diNHaUKLaw3x8mK7ItiS9 Hyl1fBWQiX0= =0/PO -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "Reality is not optional." --Thomas Sowell The NEW(!) e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Re: None
by Daniel Miskell 17 Dec '03

17 Dec '03

Mr. Nobody writes: >In article <Pine.LNX.3.91.960123192018.1008D-100000(a)zifi.genetics.utah.edu> >zinc <zinc(a)zifi.genetics.utah.edu> writes: >> i got this in the mail this morning. here's another blatant case >> of illegal export. names and exact addresses removed to protect the >> clueless. > >Why exactly did you post this message? I personally don't mind, but >am just curious. Why exactly did YOU post this message? I personally dont mind, but am just curious. Munster --- _________________________________ *!Cheese Doctrine:!* Though cultured over time, and aged to perfection, one must not yield to produce mold. One must also not belittle themselves by conforming to the "whiz", but melt over the unprocessed ideas of Ghuda. _________________________________

1 0

Re: "This post is G-Rated"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 9:58 PM 1/25/96, Bill Frantz wrote: >goal. The big problem is how are the labels attached to the programs. I >agree with Tim that it is probably imposible for individual Usenet >postings. However is should be possible for TV programs, and whole >newsgroups. Coincidentally, after writing my post this morning, I saw a report on CNN or CNBC about how broadcasters, networks, and producers are strongly opposed to the mandatory V-chip. Not news, but some of there reasons were: not enough time. The movie business produces about 600 hours of product per year, and the ~weeks it takes for the MPAA to view the final product and rate it (and then negotiate with the director about cutting out scenes to make an R-rated film into a PG, etc.) is marginally tolerable. Such is not the case with television, with many shows in a final version only hours before broadcast (and obviously some with even less or no advance time available). And remember that the MPAA rating is most definitely NOT a "self-rating." I see self-ratings of Usenet and mailing list posts as possible, just nearly worthless. And the reall contoversial stuff, this kind of goddamned fucking shit, will not get screened out. After all, I voluntarily rated this thread "G," and look what got through! (And it's only the tit of the iceberg, so to speak.) A meaningful "parental filter" cannot be done on-the-fly with self-ratings. Some minor steps can be taken, but not all worth the expense and hassle of a mandatory system. --Tim Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Using the V-chip to Filter Commercial Advertisements
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:05 PM 1/25/96, Sten Drescher wrote: >their own. But do you really think that MTV will use a V-Code? (It >could be amusing if they did - 10 minutes of blank screen, then 2 >minutes of commercials when someone cranks all of their settings to >Full Filter.) One way to kill the V-chip dead is to announce hacks to the V-chip box that will do the _reverse_ of this: block commercials (advertisements, for any non-American readers) but pass programs. (Before anyone points out that such boxes have been built, based on volume levels, spectral content, etc., sure. What I'm speculating about is a subversive campaign to get the meme out there that the V-chip can be used as a filter of commercials.) Even if it is not done, fear of the possibility of this will kill the proposal. --Tim Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Etch-a-sketch
by Jonathan Zamick 17 Dec '03

17 Dec '03

Ok.. I'm still getting mail regarding the etch-a-sketch keychain. Thus I'm going to look at how to get em for everyone. :) Just letting you all know. Don't bury me in 'I want one mail.' As soon as I have the info I'll get it out to the hungry crowd. Heh. At that point you can bury me happily. Jonathan ------------------------------------------------------------------------ ..Jonathan Zamick Consensus Development Corporation.. ..<JonathanZ(a)consensus.com> 1563 Solano Ave, #355.. .. Berkeley, CA 94707-2116.. .. o510/559-1500 f510/559-1505.. ..Mosaic/WWW Home Page: .. .. Consensus Home Page ..

1 0

CAs and Digital Timestamping
by JMKELSEY＠delphi.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [ To: sci.crypt, sci.crypt.research, cypherpunks ## Date: 01/25/96 10:08 am ## Subject: CAs and Digital Timestamping ] At the RSA conference last week, it occurred to me that there's a really neat application for digital timestamps (as done by Surety). Whenever a CA (Certification Authority) issues a public key certificate, it should also digitally timestamp it. This provides a relatively clean way to recover from top-level CA key compromises. First of all, let's talk about hash trees. A hash tree (I think the idea was originated by Merkle, but I could be wrong) is a binary tree. Each node in the tree eventually winds up with a hash value associated with it. The bottom nodes on the tree are hashes of individual messages. The other nodes are made up of the hash of all their children. This looks like this: (pardon the ASCII art) : H_0 = hash(H_1,H_2) : / \ : H_1 = hash(H_3, H_4) H_2 = hash(H_5,0) : / \ / \ : H_3 = hash(M_0) H_4 = hash(M_1) H_5= hash(M_2) 0 : : The neat thing about this is that, if I know H_0, then when someone wants to verify that M_0 appears in the hash, they only have to tell me H_4 and H_2, and the position of M_0 in the tree. I can then find H_3 = hash(M_0), H_1 = hash(H_3,H_4), and verify that the final H_0 = hash(H_1, H_2) gives the right output value. (Compare this with a hashing chain, and you can see that, for large trees, there's a big advantage here. The number of values needed to authenticate a given message in this tree is log_2(number of messages in the tree), while the number of values to verify a chain is is the whole number of messages in the chain. In the digital timestamping service offered by Surety, they use hash trees of this kind, because this allows efficient verification of a digital timestamp. The idea behind this is that a message is hashed into the hash tree, and that the final value of the hash tree each day or week is widely published, including in the New York Times. So long as it's not feasible to go back and change that value, and it's not possible to find collisions for the hash function, any hash value that appears in that tree must have been presented to the timestamping people at some point before that tree's final hash was calculated. Here's how we use this in having a CA sign certificates. CA Signs a Key: 1. At the beginning of the day, the CA generates a random value, R_0, and has it digitally timestamped. The resulting timestamp is used as one of the entries in today's hash tree. (If the CA is their own digital timestamp service, then they'll have to use the previous day's ending value, which is reasonable enough. They'll also have to work a lot harder to publish this value each day or week.) 2. For each certificate to be generated: a. The CA verifies the information in Certificate_u, then signs it with SK_{CA}. Certificate_u contains some indication of the time and date. b. The CA hashes Certificate_u into its daily hash tree. c. The CA sends Certificate_u to user u. 3. At the end of the day, the CA publishes its own final hash tree value, and gets this value digitally timestamped. (This amounts to having the CA act as its own "node." for the timestamping service.) Now, imagine that the CA's key has been compromised. (We have to assume that the CA's daily operations were OK--if not, there doesn't seem to be a clean way to recover cleanly.) The person who has the CA's key can issue false certificates. After a while, one of these false certificates are noticed. How do we recover? We use the hash trees and the digital timestamps which we've made in the past to verify each certificate presented for recertification. The digital timestamps allow us to immediately verify that this certificate was issued by this CA at this time. And we can be certain that this hash tree is correct because it's been digitally timestamped. What this does, essentially, is to allow us to quickly recover from key compromises. We still have problems if someone can take over the operations of our CA for a few days or weeks, though in that case, we probably know the likely dates. No compromise at the CA can put a different date's timestamp on a certificate. Now, I should note that I think Merkle talks about using hash trees to do public key certificates, in his thesis, and the idea may be patented. (It's been a couple of years since I looked at his thesis, so this is a little hazy.) However, we're not using them here to provide certificates--we're using them to authenticate the certificates in the event of a catastrophic key compromise. I don't think Merkle talked about this, but I could be mistaken. (At any rate, I've never seen any mention of it since then, though it's an obviously useful idea.) If the tree structure is patented, then we could still do this by using chains or some other structure. Does anyone know if this basic idea has been proposed before? I am pretty sure I haven't seen it, but it seems pretty obvious now that I think about it. We could even recover using this method from a break of the hash function supported (so long as the timestamps are done with multiple hash functions, and at least one isn't broken), or the public key algorithm used. --John Kelsey, jmkelsey(a)delphi.com / kelsey(a)counterpane.com PGP 2.6 fingerprint = 4FE2 F421 100F BB0A 03D1 FE06 A435 7E36 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMQfn70Hx57Ag8goBAQETUQQA3S7k8rrYDud5N3uVdUqSVHC3VH+Tpmuu wcRisf8PrYX/I9Q4vBTN7SS0H30Xl1bRTQyS1mQP+CuyBlESi1qn0OMKbgAYPndd 1qYOvrX/29fMbhrO7VQjAcSAHpCZOvoVfsq0fWwv4zzUIhJBZNFnMxdSm4eNrmEv U3/oo5CiM2o= =7TIl -----END PGP SIGNATURE-----

1 0

Re: "This post is G-Rated"
by williams＠va.arca.com 17 Dec '03

17 Dec '03

Tim May writes: > So deal with the hypothetical I gave: someone like me sets out to "nuke" > the labelling system by deliberately mislabelling his posts! If you have > labels but no means of stopping my actions, see what results. What if there was a flag on each message which the author could leave "UNSPECIFIED" or indicate "NOT INTENDED FOR KIDS." You could attack by marking a bunch of bland stuff "NIFK" or you could leave some porn "UNSPECIFIED". Either way, I think the situation is better for kids. I hope that the majority of Internet users are not actively trying to get porn to kids. > A meaningful "parental filter" cannot be done on-the-fly with self-ratings. > Some minor steps can be taken, but not all worth the expense and hassle of > a mandatory system. I see labels as helpful rather than restrictive. A label provides additional information to help people find the information that they want. That information can also be used to help you cut out the information you don't want. If parents want to use this flag because they think it might help their kids, great. Maybe nobody would use the flag, but I don't see how it could hurt. If I had kids, I would appreciate having the option of sorting out all the stuff that is "NIFK" by the author. --Jeff

1 0

Are Cypherpunks Influential?
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:23 PM 1/24/96 +0700, Patiwat Panurach (akira rising) wrote: >Would you call cypherpunks (as a group and as a philosophy) to be >influential? Do you think governments listen to us much? Are they forced >to listen to us? Any stuff to support this? Please give me your comments. Much more influential than deserved. We've gotten a lot of press. I would say that we are an example of cultural entrepreneurship. An entrepreneur makes money by noticing that there is an unexploited difference between the price of a final product and the sum of the prices of the factors of its production (discounted to present value). We noticed that there is a difference between the social and technical capabilities of modern math and modern computing on the one hand and the public perception of those capabilities on the other. By simply pointing out those mistakes in public perception and doing some (as little as possible) coding to prove it, we've gained some publicity. An example of the gap between perception and reality that we can easily exploit, I would point to the regulation of broadcasting. There's a lot of talk with the telecoms bill about whether and how much broadcasting should be deregulated but it is obvious to us that it already has been. I was thinking of that while doing my mail and listening to the Leader of the Free World last night via RealAudio 2.0 and KLIF radio in Dallas via Audionet. Radio has been deregulated by technological change since RealAudio appeared last Summer. TV dereg will follow with the higher bandwidth. All cypherpunks have done is to point out simple facts like this. Pretty easy work if you can get it. DCF "My fellow Americans, we must free our nation from the tyranny of "Others Government" and turn instead to "Self Government". We must accomplish this great task not for ourselves, but for the *Children*." -- 10-second SOTU Address

1 0

Re: "Gentlemen do not read each other's mail"
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 4:08 PM 1/25/96 -0500, hallam(a)w3.org wrote: >>Why is he our patron saint? He was a government official coming out >>against invasion of privacy. Isn't that what we are all after, in the >>end? > >There is a considerable difference between running a government and being an >individual. It is not merely ethical for one government to read another's >mail, >it is a duty. I am not sure that I believe this line of reasoning my self, but here goes: The US government is "owned" by its citizens. Therefore US citizens should have a high degree of protection from their government. However, non-US citizens do not enjoy this same high standard (not being "owners"). They perhaps should enjoy a similar standard in relation to their own governments. Another way of putting it is that while gentlemen do not read each other's mail, gentlemen read non-gentlemen's mail. Bill

1 0

Re: TOP_tap
by Rich Salz 17 Dec '03

17 Dec '03

The NSA is a branch of the DOD. Up until recently (18-30 months ago) NSA employees were only allowed to identify themselves as employees of DoD. It was common knowledge, that unspecific references to Fort Meade meant NSA; and if you saw a P.O. from Procurement Office, Fort Meade, it meant the NSA was buying it. /r$

5 4

RE: RANT: cypherpunks do NSA's job for them!!
by blanc 17 Dec '03

17 Dec '03

From: Vladimir Z. Nuri maybe TCM, who in this case imho is part of the PROBLEM and not part of the SOLUTION, and an example of how our own behavior is sabotaging our key goals, will think twice when he writes another *sskissing, tedious "what the NSA thinks about [x]" post. ....................................................................................... Maybe he should write something like this?: it seems to me the problem is when a government begins to insist that the only authorized encryption you can use must be based on the secret key they give you is where all the problems arise. so, what we could advocate as a compromise (given that the post office is absolutely not going to *not* get in this business, from what I can tell). we encourage the idea of KEY FREEDOM this would be a heading for the idea that we are in support of the (our) government creating cryptographic infrastructures and key authentication services, as long as we always have the total freedom to encrypt according to however we please in private communications. [Date: Thu, 30 Nov 95 15:39:09 -0800 From: "Vladimir Z. Nuri" <vznuri(a)netcom.com> Subject: key escrow compromise] .. Blanc

1 0

Re: "Gentlemen do not read each other's mail"
by jim bell 17 Dec '03

17 Dec '03

At 04:08 PM 1/25/96 -0500, hallam(a)w3.org wrote: > >>Why is he our patron saint? He was a government official coming out >>against invasion of privacy. Isn't that what we are all after, in the >>end? > >There is a considerable difference between running a government and being an >individual. It is not merely ethical for one government to read another's mail, >it is a duty. > >By not taking adequate steps to inform itself of the Japaneese intentions the US >suffered the loss of a substantial part of the US fleet at Pearl Harbour. Had >sufficient resources been avaliable the naval codes could have been cracked in >time. The closure of the Black chamber was a key reason why US espionage >efforts were inadequate at the start of WWII. While this may be based on the "classic" view of the start of the direct involvement in WWII, I agree with the opinion of an old college professor that the US KNEW that the Japanese were going to attack, SOMEWHERE and SOMEWHEN (but not exactly), and in fact WANTED the attack to occur to justify getting into a war that we "should" have entered. And in hindsight, I do not necessarily disagree with such a goal, within the limited context of the circumstances at the time. An extention of this interpretation is that much of the fleet was kept at Pearl to "lure" the Japanese into doing an attack that could be used to rally the public. (they needed to have enough "bait" to justify an attack.) Obviously, if that was the intention, then the big surprise was how EFFECTIVE the attack was going to be: Far from just "rallying the public" it smashed our defenses. The reason I mention this interpretation is that it entirely turns around your argument: Our criticism should not be how little we knew of Japanese intentions, but how we incompetently delayed entering a war that "needed to be fought." Naturally, however, considering the results of the attack, it would have been totally unthinkable to reveal to the public that the bigshots had actually DESIRED the attack; a far less incriminating version of the story is that some other people were merely negligent. Now, I was born in 1958 and thus can't claim personal knowledge of the time, but it's truly amazing how UNPERCEPTIVE the public must have been in the late 40's and early '50s about "intelligence" realities. Let me give you a specific example: The classic movie, "The Man who Never Was," relates the (true) story of a counter-intelligence mission done by the British to (I think) mislead the Germans into believing that the attack on Sicily would be substantially LATER than it actually was. The British took a man who had died of some natural disease (with the permission of his family, of course), dressed him up as if he were a courier and dumped his body (carried by submarine) off the coast of (then Fascist) Spain. With the body were (sealed) phony documents that described the FALSE date. (The idea was, the Germans would think that he was on an airplane that had crashed into the ocean...) ( He was given a false name, false address, and basically a false identity to complete the ruse.) By design, he was dumped at a point where ocean currents washed him ashore, where he was identified by papers. Naturally, the British were notified by Spain, and the British played along and INSISTED that none of the documents with the body be unsealed and given to the Germans. Naturally, however, the Spanish cooperated with the Germans, and allowed them to (secretly) unseal the documents undetectably. However, the documents (still apparently sealed and unopened) were returned to the British so that (to the Germans) the British wouldn't be aware that their secrets had been compromised. Follow me so far? Well, in the movie (whose accuracy I don't know) the Germans didn't totally believe that the courier was "real", so they sent an operative (probably by parachute airdrop, or whatever) to check out the particulars of the story they "learned" from the fake background. (Naturally, the British knew about this) At that point, the British had to plant operatives, and support the phony story on the spot, "verifying" the information. At that point, the German agent was able to transmit news that "the information is real!" to the Germans. Now, here was was (to me!) the "funny" part of the movie: The British let the German agent leave Britain. This sounds logical, right? Because if they were to PICK HIM UP as a spy, that would have alerted the Germans that his identity and mission were already known, which would only have been true if the story given the Germans initially had been a FAKE! Yet, in the movie, it was necessary to "explain" to the (early 1950's) audience why they "let that German agent leave Britain"!! I was laughing, practically falling off the edge of my seat, as I was watching that scene! Clearly, ordinary people of that era weren't very perceptive about such things. Had they (Americans) been told that, "We had to get into WWII to save the free world, so we let the Japanese sink half our Pacific fleet!" the public WOULD NOT have understood. This is why I tend to believe that professor's interpretation: While the exact time and location of the attack was not known, IT REALLY DIDN'T MATTER because they WANTED it to happen. The "we couldn't decrypt their traffic in time" (even if it was really true) was merely a convenient cover story for the truth.

2 1

RE: RANT: cypherpunks do NSA's job for them!!
by blanc 17 Dec '03

17 Dec '03

From: Vladimir Z. Nuri your friends, family, associates, etc. constantly *reminding* you of that law is the major, critical, unseen mechanism in propagation of laws. ............................................................................ Actually, Vlad is has a remote point. When signs on the road advise everyone to buckle up - because "it's the law", it has the intent of providing the be-all and end-all reason for why we should do the things we do. When certain activities are described as being "illegal" it lends to the laws surrounding them an air of legitimacy, even though most anyone on this list who refers to them in that way understands that they are phrasing their words in terms of how these actions are perceived/categorized by the lawmakers, not by the cpunks. Yet you must understand, Vlad: you aren't going to figure out how to deal with a looming threat like ITAR simply by being nonchalant & devil-may-care. The fact that some people (lawyers) know what corporations & individuals are facing if they try to import or export "illegal" substances like abstract code, and the fact that some people (programmers) discuss the issues openly, does not mean that they are headed in the direction of submission to the given obstacles. It just means that they're thinking through the problem, to clarify just what the situation is, to give conscious consideration to what anyone might have to deal with as a consequence of their decisions (to do what they will regardless of the NSA's perceptions). I think this is a valuable & legitimate pass-time. .. Blanc

3 4

Webcard
by Vincent Cate 17 Dec '03

17 Dec '03

Block Intros Visa Card For Internet Users 01/25/96 KANSAS CITY, MISSOURI, U.S.A., 1996 JAN 25 (NB) -- Block Financial, an H & R Block (NYSE:HRB), company, has announced a Visa card created just for Internet and World Wide Web users. The card is called Webcard. One of its features is the ability to check your account balance around the clock in real-time via the Internet. "Cardholders can monitor their current account activity or review data as far back as 12 months and even check to see if their payment was received," said G. Cotter Cunningham, vice president of Block Financial Corp. The company said it has addressed security concerns about revealing credit card numbers by designing the online account review feature so actual account numbers never appear online. To make the data more useful, Block has set up the Web site so the account information can be imported directly in many of the popular word processing, spreadsheet, database, and personal finance programs, including Quicken. Webcard is issued by Columbus Bank and Trust Company, an affiliate of Synovus Financial Corp. The card carries no annual fee. The company said it will soon launch a direct mail, advertising, and telemarketing campaign to publicize the card. Cunningham told Newsbytes the easiest way to apply for a card is to complete an online application online. Block Financial's home page on the Web is at http://www.conductor.com . Cunningham said two levels of card are available. The Gold card is the one being promoted. It carries a 12.9 percent interest rate for the first six months. After that the rate reverts to whatever the prime rate is, plus 6.9 percent. Currently the prime rate is 8.5 percent. Applicants who don't qualify for the Gold card can still receive a Classic card, said Cunningham. Initially that card carries a 12.9 percent interest rate for the first six months. After that, you pay two points more than Gold card holders. Block said the Webcard is the first in a series of co-branded financial products slated for introduction this year. Other services to be offered include online bill payment, which is set for launch in the next 60 days, and online checking services. Cunningham said the pricing structure for the bill payment service hasn't been set yet, but will be competitive. Block Financial already offers the Compuserve Visa, a credit card exclusively for Compuserve subscribers. The company said it has already issued more than 100,000 of the Compuserve cards. (Jim Mallory/19960124/Press contact: Julie Eisen, Block Financial, 816-751-6010/WEBCARD960125/PHOTO)

1 0

Re: Cypherpunk Elitism
by Bruce Baugh 17 Dec '03

17 Dec '03

At 07:15 PM 1/25/96 EDT, "E. ALLEN SMITH" <EALLENSMITH(a)mbcl.rutgers.edu> wrote: > You might also find Robert Reich's _The Work of Nations_ >interesting. As a short, elegant, powerful argument against statist thinking, I recommend most highly Kenichi Ohmae's THE END OF THE NATION STATE: THE RISE OF REGIONAL ECONOMIES. Mr Ohmae focuses on areas that have geographical and social meaningfulness, on the scale of Hong Kong/Canton, Catalonia, the Pacific Northwest, and so forth. He quickly makes hash of the idea that the nation-state is a meaningful unit for modern economic analysis. ObCrypto: He looks for region-state governments that, among other things, respect citizens' privacy. Bruce Baugh bruceab(a)teleport.com http://www.teleport.com/~bruceab

1 0

John Doe
by jdoe-0007＠alpha.c2.org 17 Dec '03

17 Dec '03

The John Doe NYM/Remailer interface for Windows is a most excellent program that will allow even the most cypher-illiterate to make use of the technology that has been the exclusive domain of those in the "techno-know". It was a piece of cake to set up, obtain a NYM and select inbound and outbound remailers with options to chain as many as your paranoia deemed appropriate. $25.00 seemed a little steep but they will get my $$$. Nice Job. John Doe 0007

1 0

Re: "This post is G-Rated"
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

At 18:11 1/25/96, Timothy C. May wrote: >Suppose "alt.fan.barney" is rated G, by "someone." Since I can post stuff >with strong language, and worse, to alt.fan.barney, is it still rated G, or >was my stuff blocked? What you will see is something like this: all lists/newsgroups will have to be moderated with the name of the moderator clearly stated just as it is in print magazines today. If something that is potentially dangerous to children, that is any information that might encourage anyone to think for themselves, gets posted, the moderator will be held liable. Since that will lead to the moderator erring on the side of caution, discussions on USENET/ mailing lists will become next to useless and therefor die out for anything non-technical (no, that won't include cryptography) or politically incorrect. Any ISPs carrying non-moderated groups or mailing lists is subject to the often mentioned mandatory long years in prison under the Child Protection Act of 1998. It is all rather simple. And the public will thank the kind and caring legislators that show such deep concerns for their children. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.

1 0

NOISE Test Ignore
by jdoe-agamemnon＠alpha.c2.org 17 Dec '03

17 Dec '03

Test Test Test

1 0

This is not "DivineBeingPunks"
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 1:52 AM 1/26/96, Perry E. Metzger wrote: >I'm sure that most people seem to believe in this quasi-Divine Being, >of course. A lot of people seem to have constructed temples to some >Holy Being that they refer to as "The Government", made of marble and >steel and glass (often in the manner of temples constructed in ancient >times to Jove or Apollo). There are strange rites associated with the >worship and sustenance of this Divine Entity, such as the ritual ....etc. etc. etc. Since Perry has on several occasions said he does not want to hear about politics and other "off-topic" posts, and since he has written at least five of these posts just today (the "Gentleman do not" thread), I suggest he heed his own advice. I was skipping most of these posts that Perry, Rich Graves, and others are writing, but the hypocrisy of calling for others to not engage in "off-topic" posts while writing five of them himself...well, it speaks for itself. Debating basic libertarian theory, including the rights of Divine Beings, quasi-Divine Beings, Secular Beings, etc., is best done on another list, or in private e-mail. What's sauce for the goose is sauce for the gander. --Tim Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Re: "Concryption" Prior Art
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

Death rays from Mars made pcw(a)access.digex.net (Peter Wayner) write: >I haven't read the supposed Concryption patent so I don't know >what the claim structure is. But if they truly claim the right >to do encryption and compression simultaneously, then I've got >some prior art that should knock out such a broad claim. The >paper is "A Redundancy Reducing Cipher" (Cryptologia, May 88). >It's not very secure, but it does do some manner of encryption >at the same time as compressing a file with a Huffman-like >system. The journal is found in many university libraries so it >should be easy to produce a solid counterclaim. There's a much earlier paper by Frank Rubin in a 1979 Cryptologia which covers encryption+compression with Huffman and arithmetic coding. However the Con-cryption patent covers first compressing, then encrypting. Unless they've got very good lawyers, you can probably ignore it. Peter.

1 0

Re: "This post is G-Rated"
by tcmay＠got.net 17 Dec '03

17 Dec '03

I typically enjoy Lucky's jaundiced analyses, but I think he is overly paranoid in this one: At 5:28 AM 1/26/96, Lucky Green wrote: >What you will see is something like this: all lists/newsgroups will have to >be moderated with the name of the moderator clearly stated just as it is in >print magazines today. If something that is potentially dangerous to First, printed material does *not* have to have an author or publisher specified. The usual case cited is the Supreme Court decision on "anonymous handbills." I know of some zines that have no identifiable origin point. And anonymous pieces are published (even where the publisher/editor does not know the true author.) Second, Usenet is a global thing. Which national laws will apply? If the U.S. somehow is dumb enough to demand that each of the 12,000+ current Usenet groups have a moderator in a U.S. jurisdiction....well, there are too many issues here to properly deal with in a short note. Third, if the moderator is liable for "allowing" inappropriate material to get through, I predict a rather severe shortage of moderators. It's already a thankless job, so why any sane person take on the liability of doing it? Fourth, the Soviets couldn't control the underground "samizdat" press, and this was when the sanctions were stronger and the channels of communicaton more available. Today, in the West, there are at least two orders of magnitude more channels, and several orders of magnitude more sites, bandwidth, etc. Fifth, major constitutional challenges would be mounted. The First Amendment says that a posting to a public discussion does not first have to be cleared by a censor/moderator! (I'm not saying a group cannot be moderated, I'm saying that making it a crime to have an unmoderated, uncensored group will not pass constitutional muster.) --Tim Boycott espionage-enabled software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: "This post is G-Rated"
by Greg Broiles 17 Dec '03

17 Dec '03

At 02:06 AM 1/26/96 GMT, Jeff Williams wrote: >Maybe nobody would use the flag, but I don't see how it could hurt. If I had >kids, I would appreciate having the option of sorting out all the stuff that >is "NIFK" by the author. My concern about such a flag is that if it was implemented widely, it would be a small step from being optional to being mandatory. As things stand, were some legislature to adopt a "mandatory labelling" statute tomorrow, we'd end up with a complex and pointless mess of conflicting and incompatible attempts at compliance, rendering the labelling scheme effectively useless; and, likely, "industry" (e.g., the big service providers + AT&T & MCI & Sprint etc) would oppose the legislation on the grounds that compliance would take several years and complex design to bring about. So we'd get some sort of grace period to argue against it, prepare good test case(s), establish offshore mailing lists/servers, and so forth. But if we let the market do an efficient job of developing and deploying a labelling standard, over the course of the next few years, we're an afternoon's sorry debate and a few bought-and-paid-for committee meetings away from a market standard turning into a statutory duty. This makes me think that if development of a labelling standard is imminent, it's time to find ways to subvert it, misuse it, avoid it, and otherwise treat it like an enemy. It's not necessarily an enemy until it's coopted into service by a coercive force (be it big brother^h^h^h^h^h^h^hgovernment or big brother^h^h^h^h^h^h^hcorporation) but it's a potential threat. Are you sure that your relatively moderate "less NIFK material is a good thing" stance is a good reflection of others' positions? My impression is that many people are dissatisfied with anything less than a "zero tolerance" position re kids & porn or kids & drugs or kids & sexual choice or whatever. Your view of a partial-cooperation world isn't especially draconian, but do you really think that others will be as tolerant of other positions re labelling? -- "The anchored mind screwed into me by the psycho- | Greg Broiles lubricious thrust of heaven is the one that thinks | gbroiles(a)netbox.com every temptation, every desire, every inhibition." | -- Antonin Artaud |

1 0

Problem building PGP on NT
by Max Domeika 17 Dec '03

17 Dec '03

Hi, First question: Is this the appropriate place to go with this kind of question. If not, I apologize. Anyways here goes: I'm trying to build PGP, the MIT version under windows NT using Microsoft C++ version 4.0. The program builds after a few modifications to the makefile but cannot generate a RSA key. Everytime, I type pgp -kg and answer the required questions, pgp attempts to generate some primes and apparently fails. Anyone have a clue as to what the problem may be??? I know there is an executable of PGP for NT already made, I've used it. So I at least know it's possible to build on NT. Anyone else attempt a port to NT??? Thanks ahead of time, Max

1 0

9th Circuit addresses vicarious liability
by Greg Broiles 17 Dec '03

17 Dec '03

The 9th Circuit issued a ruling today in _Fonovisa v. Cherry Auction_ overturning an ED CA district court's ruling re vicarious liability for copyright and trademark infringement. If I remember correctly, the lower court's ruling was one of those relied upon by Judge Whyte in his recent _Netcom_ ruling. In any event, it looks like it's an important development in vicarious liability and thus liability for ISP's and remailers and other providers of electronic "space" or conduit. http://www.callaw.com/9415715.html -- "The anchored mind screwed into me by the psycho- | Greg Broiles lubricious thrust of heaven is the one that thinks | gbroiles(a)netbox.com every temptation, every desire, every inhibition." | -- Antonin Artaud |

1 0