December 2003 - cypherpunks-legacy

PGP 5.5 available outside US
by Lucky Green 17 Dec '03

17 Dec '03

It seems that unknown Cypherpunks have yet again shown their disrespect of US export laws by exporting the latest version of PGP. The Windows version of PGP 5.5 is now available for your downloading pleasure at ftp://ftp.replay.com/pub/crypto/incoming/PGP55.zip PGP 5.5 features superior LDAP keyserver integration, multiple signature categories, and automatic decryption (set Preferences -> Email -> Automatically Decrypt). "You heard the rumors. Now try it yourself." :-) -- Lucky Green <shamrock(a)cypherpunks.to> PGP encrypted email preferred. "Tonga? Where the hell is Tonga? They have Cypherpunks there?"

2 1

Mmphmmphmmmph! (WAS Re: I Broke PGP!!!)
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

That was the sound of me eating crow. Although I am a closet reader of the True Story of the Internet series I am generally perturbed by the many of the inane Truthmonger posts to the list. I had decided several days ago to make a small apology to Truthmonger for some of my more emotional attacks on him (or her) but I put it off and put it off. I decided not to put it off after reading the following: Six wrote: > Bonus Question: "Who is TruthMonger #1?" > Bonus Answer: "He's Randall Farmer's best friend." That is _exactly_ what I thought when I read Randalls whining post about how Truthmongers rudeness might necessitate Randall instituting security and identity procedures that would enable others to verify whether a digitally signed message was indeed from himself. When I saw Tokoyo Rose echoing my thoughts then I thought I should take the trouble to point out what I myself learned from Truthmonger. [Although I am not certain if it is the same one.] I made the mistake of informing several people that the exercise that was suggested in Epiloge 5? of Infowar was bullshit but when I tried it it spit out my secret key like a hot damn much to my surprise. So I owe Truthmonger an apology but it will not be a public one. [Very few of you would know me anyway since I am mostly a list lurker.] The reason I will not make a public apology is because I also had PGP spit out the secret keys of my boss and coworkers. Although I am not a bad person in general possession of these keys is making me begin to think like Truthmonger. I will probably just test whether I can indeed password break them and use them to decipher a few files and then erase my copy of them. [Maybe.] [Maybe I should make my .sig line "Beware of Truthmonger inside!"] I did a search for the post that Tokoyo Rose talked about Truthmongers nephew adding things to Truthmongers email and found: > Also, as a 'teaser', I would like to announce to one and all that > the quickly closing saga of 'InfoWar' will include an epilogue > chapter titled, "I Broke PGP," written by myself. > Believe it or not, I speak the truth, although not in a way that > it direct and obvious. > If you think I am bullshiting, then stop washing your asshole, > starting today, because if you can show me I am wrong, I will kiss > your ugly, hairy ass. > > Love and Kisses, > TruthMangler After looking at other posts that have Truthmangler in them instead of Truthmonger I think that it might be a sign that the nephew is messing with them since they seem to have things inserted in them which appear to come more from a childs mind than Truthmongers. [If that is possible.] (;>) I would be interested in finding out if other people have been able to get secret keys using the method described in the Infowar book. We are using PGP 2.6.3i. I wonder about other versions. Croweatingmonger

2 1

re: Hlep
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Misty Ed the incredible talking horse.

1 0

Re: Singaporean control freaks & CMR (Re: puff pieces vs tough crypto issues)
by Blanc 17 Dec '03

17 Dec '03

Harish Pillay wrote: >I don't think the "micro management" is at it's worst in Singapore - not by >a long shot. It is true that the Singapore government tries to do so and >in a lot of what they attempt, they somehow come out smelling roses. But >they have goofed up royally as well. ................................................................... If you don't mind my asking in front of everybody, how do you stand it, living there? Do you get very frustrated (it sounds as though you might), and want to leave for Anguilla? Do you remind yourself not to litter with those gum wrappers you're not supposed to have anyway, what do you think when you're being incentivized to find a sexual partner and produce children, or to Do This and Not do That or risk painful punishments? Do co-workers become critical of each other's petty "crimes", do you feel opressed all around, or is it not as bad as it seems from here? .. Blanc

3 2

Re: poverty traps (Re: Sa
by Blanc 17 Dec '03

17 Dec '03

harka(a)nycmetro.com wrote: >Further it is a social issue of importance also for Cypherpunks. >Obviously we don't want governments "taking care of people", but >desire individual freedom, self-determination and independence >instead. However, as proven such things are possible in the "free >market" only to a limited degree, i.e not applicable by default to >everybody, IMHO. [. . .] >If anybody _does_ have a solution, that enables _all_ people >(regardless of background) to become truly free and also provides a >realistic way to achieve that (for everybody), then I'll be more >than happy to listen and to adjust my own perspective. .................................................. The concept of a free market is not that it will "make you" free, nor that it shall "provide you" ("you" being any one engaged in the exchange of goods/services) with a perfect life, free of worry and the work of thought and decision-making, creating the "perfect life" solution for everybody. A free market doesn't "do things" for a person in spite of themselves. In a free market scenario it is intended that any individual will be a free agent - free from government interferance, free from government compulsion - to create their *own* life's "solution", satisfactory to themselves (regardless of whether it agrees with, or is at variance to, any one else's standards of living). It is intended that an individual will be left to their own devices, to seek out the methods which they themselves calculate will lead to the achievement of their own goals, according to their own vision of success - that is, not the government's vision of success, nor the vision of their neighbor, or of their mother-in-law, or anyone else who wants to shape one's life for them and tell one what to do with it and how (no, Jim Choate, I am not discriminating against Mothers-in-law, I'm just using them as a stereotypical example of an interfering busy-body. Don't worry about it.). It is way too easy to say that if you don't like something (like working for a certain employer) you should change employers (easier to say than done). But the real aim of this argument is against the attitude of tolerance, of tolerating the unacceptable or uncomfortable; it is that when a person finds themselves seemingly trapped, they should not merely suffer the circumstance (or worse, whine about it to everyone within earshot), but should rather orient themselves towards finding a creative solution and never cease searching for a way out. Because nothing is created or advanced into improvement by merely tolerating the intolerable, by just "taking what was given", or from continuing to bear up under low standards of functioning. The "free market " is not for the purpose of freeing everyone from the work of solving their own problems; the idea is to leave them free to negotiate with others on the terms of their interactive business arrangements (you know - work/pay, hours/compensation, overtime/stock options, your place/my place, etc. Ideally, that is. As everyone knows, we do not live in a "pure" free-market economy, therefore these negotiations are presently all regulated, to force everyone into a standardized success & happiness). There are many obstacles to overcome in an imperfect world, in an imperfect society, in an imperfect economy, under imperfect governments, not to mention all the competition. It is very discouraging and sometimes you want to hug your Teddy Bear for comfort [ :>) ]. But sometimes the first, and largest, obstacle to overcome is one's own pessimism and negativity against mustering up the courage and creativity to "push the envelope". This fatalism is what is being criticized. .. Blanc

2 1

Re: PGP Employee on MKR
by mark＠unicorn.com 17 Dec '03

17 Dec '03

shamrock(a)cypherpunks.to wrote: > OK, I must be missing something. How can it be more evil if the email > isn't automatically sent to the owner of the MK key than if the email is > automatically cd'ed? Uh, don't understand the question. The issue is that it's being encrypted to multiple keys for one recipient. > Agreed. And so did PGP 2.x and any version of PGP that allows for > encryption to multiple keys. Anybody can take the 2.6 source and hardcode > in a second recipient key. But, for the fifth or sixth time, _that isn't being shipped as standard by PGP_. > I read the recently proposed alternatives > and fail to see how they would prevent GMR any more than PGP's solution. > All I saw were convoluted and frequently hasty designs, many of which > lend themselves even more to GAK then what PGP did. Really? I seem to recall Jon Callas saying my system 'redesigned CMR' but was simpler than theirs. The mere fact that CMR requires an enforcer implies that it's a convoluted and hasty design. > Once, (as many of you know IMHO it is a "once", not an "if") GAK becomes > mandatory, it can be implemented with 2.6 just a easy as > with 5.5. But it can't; for a start 2.6-based GAK won't interoperate with international versions the way that CMR will. Cutting the US off from encrypted mail from the rest of the world would probably not go down too well. Lucky, one question: wouldn't you be complaining if Netscape or Microsoft were shipping a system which enforced encryption to snooping keys? Why should we feel any differently about PGP? Mark

3 2

Re: CMR versus GAK?
by John Young 17 Dec '03

17 Dec '03

Lutz wrote: >May be in your (poor) country. There is a world outside US. Good point, and note that there are many other worlds within the US besides the LOOD stud-employer-has-manifest-destiny-control version. But it is good marketing to sell fearful business owners gadgets and to perpetuate their sense of knowing what's going on behind their backs, as with frightened pols, spies, cops, parents and straights, leaky prophylactics supplemented with arms to bear when the hints of betrayal and inadequacy become unbearable. Not that the gadgets and arms work when you can't ID or crosshair the elusive backalley cats aprowl. Same goes for workers and youngsters who think the bosses and oldsters are duncemunge: WSJ, Dilbert and Phrack are funnies to avoid the admitting the deeper complicity of secret crossovers by your favorite peer group into the opposing camps, political, economic, legal, scientific, not to say no longer secure national and sexual borders. LOOD = Long Out Of Date

3 3

Don't Worry, Be Happy
by Blanc 17 Dec '03

17 Dec '03

Unix and other OSes were designed for Elite Techno-savvy Info Warriors like yourselves. Windows and the other MS apps are designed to appeal to the "common folk" who would still rather use a pc than a Mac in spite of psychological counseling against it (<g>). They have choices, there are many stores and vendors, they take their pick. As long as you can get what you want, what do youall care what other people use - why do you worry for everyone? .. Blanc

1 0

Re: Orthogonal (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > From: Mark Rogaski <wendigo(a)ne-wendigo.jabberwock.org> > Subject: Re: Orthogonal (fwd) > Date: Mon, 27 Oct 1997 01:36:06 -0500 (EST) > An entity claiming to be Jim Choate wrote: > > : I can see the union 'build complicated things out of basic building blocks' > : and the use of Occam's Razor (I'm as lazy as any other programmer) but fail > : to see how this maps to anything relating to the concept of orthogonal. > : Which clearly doesn't have any inherent minimalist cast. > : > > Minimalism is merely a by-product of orthogonality. Which orthogonality are you speaking of? > A language is considered > orthogonal if builtin functions do not provide overlapping functionality. Are you talking linguistics, philosophy, or computer? Consider, historicaly the point of 'orthogonality' was to indicate a *non-overlapping* or reducable structure, something which provides a reference to evaluate other things. > So the term orthogonal probably refers to the fact that there is no > point of intersection in the functionality of the language (or system, as > the thread started out). Orthogonal implies there is intersection, it's hard to have a closed geometric shape (-gonal) or a right angle (ortho-) axis system without them. > And I will not argue about vector spaces until I get bookshelves and actually > dig my Linear Algebra texts out of the boxes around my apartment. Good, I understand how it is used in vector spaces and don't really get my jollies off on arguing on unrelated issues. What I *would* like to know is how a mathematical term related to geometry and right angles got expanded *historicaly* to mean something completely unrelated. I don't think a linear algebra book is relevant to this question, despite the protestations of the techno-masturbatory ot the contrary. There are a whole host of users on this list who live by strawman arguments. I am glad to see you aren't one of them (apparently). ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: CMR versus GAK?
by Blanc 17 Dec '03

17 Dec '03

John Young wrote, I think: >Same goes for workers and youngsters who think the bosses and >oldsters are duncemunge: WSJ, Dilbert and Phrack are funnies to >avoid the admitting the deeper complicity of secret crossovers by >your favorite peer group into the opposing camps, political, economic, >legal, scientific, not to say no longer secure national and sexual borders. .................................................. John, you should write a book. Light reading. haiku. .. Blanc

1 0

Re: Singaporean control freaks & CMR (Re: puff pieces vs tough
by Blanc 17 Dec '03

17 Dec '03

Harish Pillay wrote: >So, now to come back to the first line. Tell me how you can tolerate living >in wherever that it you live in? ....................................................... Well, it's not so bad - I live about 3 minutes drive from Microsoft, with micro-millionaires all around. I live across the street from Crossroads Mall, which has practically everything I need, including free music/jazz concerts on weekends, the weather is nice most of the time (I *like* rain), and I'm not far away from the sea, the mountains, hiking, skiing, biking, boating, snorkeling, whatever, and lots of other genteel entertainment of all kinds. Frankly, I can just barely tolerate it, and I've been contemplating what life would be like in Anguilla. :>) No seriously, I'm referring to the political climate in the U.S. in general (although The East Side, as this side of Washington Lake is called, is considered too conservative by most Seattlites and has a large Libertarian representation, probably because of all those programmers at MS). But then, I'm a real purist and wish for extreme things, and like the princess & the pea in the fairy tale, am highly sensitive to deviations from perfection. :O It's hard to tolerate being moved to act by people (whether in government or otherwise, but of course mostly in political circles) who carelessly and disrespectfully override my personal choices in order to make their social dreams for everyone come true, using any resources they can "legitimize" taking from myself or anyone to accomplish them; it's a pain to contemplate their rationalizations. I read/study in psychology & cognition, and the area of Thinking in general, and it helps me to understand people like them, as well as to maintain a rational, balanced state of mind when contemplating their existence and considering ways to deal with it. It takes a lot of creativity to see beyond collectivist/coercive methods and carry on in spite of having to subserviently respond in "voluntary complicity". I've been mulling the whole situation over, and I think it's a good idea to emulate Bill Gates. "We're not taking over the whole world", he protested in one interview. "I mean, all we do is produce these small boxes that you can buy and put it into your pc, what does that have to do with taking over?" (hee-hee). No, it's just dragging some people, kicking and screaming, to a new level of technological opportunities. I like that. <g> I think they all deserve it. Anyway, thanks for the reply. I wouldn't argue against Singaporean citizens who actually like their way of life. I would only be concerned if they couldn't go in the directions they prefer. Micro-management is not something I myself could laugh off, as my sense of humor isn't that good, although my sense of the ridiculous is easily aroused. .. Blanc

1 0

Tim's worst nightmare.,..
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- here we go again, the AP wire just laid on this morning's action at Roby IL --it sounds to close to Ruby Ridge for my taste. This is beyond police harassment and save face for what was a civil action and will now end up with the poor lady wearing a ciminal jacket longer than her life. October 27, 1997 Woman in Standoff Shoots at Police Filed at 10:12 a.m. EST By The Associated Press ROBY, Ill. (AP) -- Gunfire rang out again at the home of a woman involved in a month-long standoff with authorities who have a court order to bring her in for psychological testing. Shirley Allen shot a police dog through the nose Sunday after officers threw pepper spray into her farmhouse, state police director Terrance Gainer said. well, wouldn't you if the dog is put in your house... She also fired a shot when police used mirrors on long sticks to peer in, but no one was injured, Gainer said. well, wouldn't you? Gainer said sound detection equipment had picked up a conversation Mrs. Allen had with herself on Friday in which she sounded as if she was ``moving closer to suicide,'' followed by a long period of inactivity. 33 days the lady has stood off a virtual army who cut off her power, water, and telephone --wouldn't you talk to yourself for company. hell, who wouldn't commit suicide rather than face the scheiBesturm she faces when they finally "bag" her. That prompted police to drive an all-terrain vehicle around her back yard Sunday, break her windows and a sliding glass door, throw in nine canisters of pepper spray and send in a German shepherd wired for sound. She fired once at the dog, Gainer said. The dog was taken to a veterinary hospital for treatment. shit, let's airdrop her a dozen TOW missles. she can put them to good use. nine canisters of pepper spray --who the hell do the think they are? Los Angeles police beating Rodney King? Mrs. Allen, 51, has attracted the sympathy of many neighbors, and her case has become a rallying point for those who compare it to Ruby Ridge and Waco as an example of overzealous law enforcement. she needs more than sympathy, she needs some action! Gainer said Mrs. Allen's actions show that she is dangerous and prove that state police cannot back off and leave her alone because she is a threat to herself and to others. she wasnt dangerous until the bastards violated her privacy; all over the fact a greedy nephew wants to get control of the valuable 40 some acres. most of the family say she's fine, but the liberal press does not report that fairly. The standoff, about 20 miles southeast of Springfield, started Sept. 22 when she used a shotgun to resist sheriff's deputies serving commitment papers obtained by her family. Relatives said Mrs. Allen, a former nurse, had become increasingly depressed after her husband died of pancreatic cancer in 1989 and recently began refusing to see or talk to her mother and brother. hell, if your relatives are being assholes, you can turn the switch off there, too. a telephone is solely for calling out with --and connecting to the net.... -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQBVAwUBNFS9zrR8UA6T6u61AQFctgH+OKh2NXtQrujbVnCmIQu7NVcyih66RgKe VdC36i2c30GRxCwLtXWWRKz5FXcAXXoTzlWPQ+7qHS+PtcE7sjiXOA== =HOw2 -----END PGP SIGNATURE-----

4 4

prova
by daniele baldi 17 Dec '03

17 Dec '03

Anon-Post-To: danbaldi(a)tin.it daniele

3 3

the usual two sided mouth political free speech
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- the usual two sided mouth political free speech in re: NYTimes letter to the editor, 26 Oct 97 sometimes I wonder if free speech isn't already muffled; the rest of the time I know it is. anytime a politician can get a headline, they will stamp on someone's rights. common sense has been exerminated more effectively than NYC's vermin. I dont like my kids being exposed to that "kind" of material, but I would sure rather it was done in an educational environment (unless it is some faggot teacher then advocating homosexual practice). children will find that "knowledge" one way or the other. You can not condemn "evil" without observing "evil" and making a _personal_ value judgement which should not be reflected in calling for laws for or against. If the adults would stop acting like 6 year olds, and the politicians as 4 year old bullies, our children might get an education. OB Crypto: maybe the teacher should be distributing this material on PGP with individual student keys; the teacher can sort out the Christian Coalition and Orthodox Jews early on and just forget to include their key --end of problem. So there is a valid use for PGP in the schools --of course, the old PGP, not their GAKed sellout. To the Editor: Gov. George E. Pataki's comments regarding Charles Self, the New York City schoolteacher who distributed a sexually explicit poem to his students, were transparently political (news article, Oct. 23). First, the Governor disassociated himself from ruling on the matter ("the appropriate sanction is not something for Albany to decide"), and then jabbed the system that must rule on it ("I think a letter in a file is not good enough"). It would have been better to remain silent. Second-best would have been to remind us of reality: most teachers are competent most of the time. They occasionally make errors in judgment. Mr. Self, reputedly a teacher who motivates his students, made a mistake -- apparently the first in 17 years to be placed on the record. In such matters we ought to set aside the broad political brush and work to rebuild the trusting relationship that teachers so richly deserve to enjoy. The Governor would do well to remember that politicians are currently held in even lower esteem than teachers. GILBERT CASS New Haven, Oct. 24, 1997 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQBVAwUBNFTB07R8UA6T6u61AQHhRQH/SAdMr/RJ6Ix6of7FPxIohxn/oOY2KOsN a09/LtVErCffpMJc0tH4ZYF5aUrBH24CyNVCeIpDQjAYEg+5TH6LLQ== =PM10 -----END PGP SIGNATURE-----

1 0

RE: PGP Employee on MKR
by Fisher Mark 17 Dec '03

17 Dec '03

Harka wrote: >The "just don't work for them if 'ya don't like it"-argument will >last about 4 weeks...the approximate time a human can survive >without eating. (or a couple of weeks less, if you have kids) > >I.e. unless you are the super-duper, three-times nobel-prize-winner >(with lots of money in stocks), who can AFFORD to choose employers >that freely, you will be DAMN GLAD to have a job AT ALL, regardless >of their policies! Start your own business. It will take sacrifice, but it can be done. It doesn't even need to be in your day-job profession, for that matter -- of the 4 start-ups I've been in, the biggest crash-and-burn was in the computer business (I seem to think mainly like a "practical researcher" rather than a businessperson when it comes to computers...). One of her problems is that teaching is basically a monopoly profession (a fact we are dealing with in our own family) -- there is no second, third etc. public school system as an employer. Another is that she is living in the confines of New York City, although I would think there should be places within 60 miles of her ex-husband where the cost of living should be significantly less. (In the Indianapolis area, she could be buying a house on her income -- maybe through a contract sale by owner rather than through the more common "Realtor" scenario, but buying a house nonetheless.) "Chance favors only the prepared mind", Louis Pasteur once said -- we took advantage of a new local trend 2 years ago, got a guaranteed sale on our large house (2300 sq.ft. with basement), went to a small house (1600 sq.ft. without basement), using the money left over to develop some ground. (All while helping my mother-in-law cope after my father-in-law's death.) There are opportunities out there -- you just have to look for them. They may take a lot of your time (so I advise looking for opportunities that you don't mind or even like exercising at 10pm at night after working a day job and caring for your children), but they do exist. ========================================================== Mark Leighton Fisher Thomson Consumer Electronics fisherm(a)indy.tce.com Indianapolis, IN "Their walls are built of cannon balls, their motto is 'Don't Tread on Me'"

2 1

DEA trying to subpoena book dealers
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

Heard on the radio this morning that a book publisher in Berkeley received a subpoena from the DEA (not from a judge, from a DEA agent...) requesting information on everybody in Arizona who bought their book on marijuana hydroponics. The publisher declined to cooperate, and there was a nice First Amendment riff from the reporter about it. Their name sounded like Ronin Press. A book store in Tempe also received a subpoena for names of everyone who'd bought the book. Cypherpunks relevance? Will web publishers get the same treatment? Will corporations running Corporate Message Recovery get requests for email sent to their sales addresses? How many of them will comply rather than noticing the bogosity of the subpoena? On the other hand, at least with CMR, companies can set decide how much information to keep, and this sort of abuse may encourage them to limit their use of it. Thanks! Bill Bill Stewart, stewarts(a)ix.netcom.com Regular Key PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639 [I'm currently having hardware problems with my main email; send Cc: billstewart(a)att.com if you need to reach me in a hurry.]

10 15

YOU ARE NOT SAFE !!!
by orchardshop＠juno.com 17 Dec '03

17 Dec '03

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX Did you know that each year 51 out of every 1000 Americans are the victim of violent crime? That's a 1 in 20 chance of YOU being attacked THIS YEAR! If you're like me, you don't like those odds. There are over 2.6 million burglaries in the U.S. every year. The scary fact of the matter is that it doesn't always happen to the "other guy." If you don't take the proper precautions it could happen to you. That's where our new report "Personal Security Basics" comes in. This unique report gives you a hands on, common sense approach to protecting yourself, your family, and your assets. The cost of this report is just $4.95 with nothing more to buy....ever. It even comes with a money back guarantee! This report shares little known criminal techniques....and how to protect yourself against them. It also shows you how a criminal identifies you as a prospective victim. For a free sample of the type of information you will find in this report, as well as ordering information click here--> Be Safe and Protect Your Assets! This is not a scam to join a multi level marketing plan, you will not be added to any list. It is simply an opportunity for you to protect yourself and your family from a world with an ever increasing crime rate. For only $4.95...can you afford NOT to be safe? XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

1 0

FCC proposes V-Chip for computers, from Time/Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

THE V CHIP, COMING TO A COMPUTER NEAR YOU Time Magazine November 3, 1997 Page 36 If you hated the idea of a V chip in your television, wait until you hear that the government wants to install one in your computer. TIME has learned that the FCC has proposed that new PCs be outfitted with a V chip to filter out video violence and sex. Still unclear is what Net broadcasts could be affected. The idea alarms free-speech advocates, who wonder why Americans need a Net-nanny. "What you get is a devolution of the First Amendment," argues lawyer Bob Corn-Revere. FCC chairman REED HUNDT says the high-tech industry can "be part of the process" as the agency sets rules. There's a low-tech alternative: the off switch. --By Declan McCullagh/Washington ********** For details check out the Netly News (netlynews.com) at: http://cgi.pathfinder.com/netly/opinion/0,1042,1528,00.html -Declan

1 0

RE: Orthogonality and Disaster Recovery
by Fisher Mark 17 Dec '03

17 Dec '03

Tim May wrote: >I'm quite certain that the Security and MIS directors at various companies >asked PGP, Inc. to include message recovery features. Not so much to handle >the very rare (almost nonexistent) cases where a piece of mail sent at some >time in the past has to be recovered because Alice was hit by a truck, or >similiar unlikely events (*), but because Security and MIS folks would like >the option of "monitoring" e-mail traffic. As someone who has witnessed recovering email (the icky task fell to someone else), I can tell you it's not a pretty sight. Employees leave, sometimes under a cloud (sometimes under several tornadoes worth of bad weather), sometimes people are assigned overseas, etc. -- sometimes file recoveries need to be done, which implies that there may have been encryption used on those files. CDR (IMHO) would allow for these kind of recoveries without compromising the security of the data en-route. Personally, I would prefer a CDR system that did _not_ encrypt the stored plaintext, just because that simplifies matters while also preventing use of CDR for GAK, as there are _no_ general organization keys for the government to desire. Nothing prevents the employee from encrypting the "recovery file" anyway, which should be done if the information is "sensitive but unclassified" (like company financial data that should only be viewable by the employees responsible for that data). (This should be done in most companies because any computer kept at the desktop is inherently insecure.) (Handling disk/file encryption keys in a corporate setting is a separate matter.) The ability to recover important documents is what _I_ want as an IS member -- and CMR isn't the best way to do it. (Personally, if IS has time to monitor everyone's email, I think they are *way* overstaffed...) ========================================================== Mark Leighton Fisher Thomson Consumer Electronics fisherm(a)indy.tce.com Indianapolis, IN "Their walls are built of cannon balls, their motto is 'Don't Tread on Me'"

1 0

Re: Tim's worst nightmare
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

> Woman in Standoff Shoots at Police > Filed at 10:12 a.m. EST > By The Associated Press > ROBY, Ill. (AP) -- Gunfire rang out again at the home of a > woman involved in a month-long standoff with authorities who > have a court order to bring her in for psychological testing. Just imagine a few hundred (or thousand) people getting together in Roby, Ill., defying the police-ordered half mile ban around her house and sitting down peacefully between her and the police...

2 1

WPI Cryptography Seminar
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: goya.WPI.EDU: christof owned process doing -bs Date: Mon, 27 Oct 1997 13:26:02 -0500 (EST) From: Christof Paar <christof(a)ece.WPI.EDU> To: ecegraduate(a)ece.WPI.EDU, ma-clipboard(a)wpi.WPI.EDU, DCSB <dcsb(a)ai.mit.edu>, ecefaculty(a)ece.WPI.EDU, faculty(a)owl.WPI.EDU, graduate(a)owl.WPI.EDU Subject: WPI Cryptography Seminar MIME-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Christof Paar <christof(a)ece.WPI.EDU> Starting next week, we will again offer an open Cryptography Seminar at WPI. We will meet (mostly) Tuesdays at 4:30. Some of the talks until the end of this year are - Erik DeWin, K.U. Leuven, Belgium: The P1363 IEEE Public-Key Standard. - David Jablon: A new network identification system. - Jens-Peter Kaps, WPI: High-speed implementation of DES on FPGAs. - Christian Cachin, MIT: Unconditionally secure key agreement. - Tobias Lohrenz and Kai Wollenweber, U. Siegen, Germany: Implementation of a key-agile ATM security module. IF YOU WANT TO RECEIVE ANNOUNCEMENTS FOR THE CRYPTO SEMINAR, please send me a brief reply and I put you on the mailing list. Otherwise you won't here from us again :) Regards, Christof Paar PS: All students in my current or past cryptography courses are automatically on the list; please don't respond. ************************************************************************* Christof Paar http://ee.wpi.edu/People/faculty/cxp.html Assistant Professor email: christof(a)ece.wpi.edu Cryptography Group phone: (508) 831 5061 ECE Department, WPI fax: (508) 831 5491 100 Institute Road Worcester, MA 01609, USA ************************************************************************* For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Re: [NEW] mixer@htp.org (
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- > Tsuyoshi Hayashi <take(a)barrier-free.co.jp> writes: > > Please add mixer(a)htp.org, the first public remailer in Japan, > was setup by a member of cypherpunks-j. > > mixer(a)htp.org is probably: > > $remailer{"mixer"} = "<mixer(a)htp.org> cpunk mix pgp"; Congrats for the new remailer and a related question: Are the cypherpunks-e and cypherpunks-j lists now fully included into the list-distribution from and to the other three nodes? (The last thing I can recall was, that there were still some problems with the distribution) Ciao Harka ... "Use a Cipher - Be Free!" -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBNFTydTltEBIEF0MBAQE4Igf+L6+JAkmntV4rNalAU63f2nYtxWW0Fvpl EK4IrKyVEAHRsduvanzoTdHlrn46ZIc5lzyUgUcEiBmPxWUyAqNrWAPyWkYGdBkW NlyXzoXrNk/cY4CsU9h9FmrIxW1fCoF6vc5JPm7fCpEweQqwAP4zE5zlCL4U1/Ny /+kYEIH5hhL5L1DHmNNLWVMcdP2JYU8Q1M6mYWf0y92fnCZfPY0mW7G5U5ONJqVR XrUlVMm4PD2TsUXmgKLTSqu24t82fNVgJ3U/bSDQGhA/Hx+B+hwuBvSBSF9XAO4G lUg8dzraUaGOrcChLwVv/ChBueBedxol+vpItsz2FIJE0sPTEpTpIQ== =XGoj -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

Re: FCPUNX:puff pieces vs tough crypto issues (Re: Singapore TOILET
by Eli Brandt 17 Dec '03

17 Dec '03

Declan McCullagh wrote: > >From my perch in Washington, I see PGP 5.5/CMR as an existence proof that > key recovery can be done. So far the crypto-advocates have been able to > wave around the Blaze et al white paper that says we don't know how to do > it. Even Dorothy Denning agreed. But now when a mandatory GAK bill goes to > the House floor, all Rep. Solomon etc. have to do is wave around a > shrinkwrapped copy of PGP and say: "I bought this for $19 at the Egghead > shop at 21st and L." Details will be lost in the fearmongering. Key detail lost: what the white paper says is that we don't know how to do it *right*. -- Eli Brandt | eli+(a)cs.cmu.edu | http://www.cs.cmu.edu/~eli/

1 0

key recovery meeting/demonstration in DC, 11/5
by Greg Broiles 17 Dec '03

17 Dec '03

See <http://gits-sec.treas.gov/const.htm>; there's going to be a meeting discussing key recovery technology and legislation in Washington, D.C. on November 5. I don't really have time to track down the organizational pedigree of "GITS" (Government Information Technology Services), the institution organizing the conference, but they've got space on the Dept of Treasury's web server. The meeting features, among other folks, William Reinsch, undersecretary at the Dept of Commerce, and an unnamed luncheon speaker who will discuss the future of KR legislation. The cost is $100, and they want you to register by today. Am unsure how easy it'd be to crash the conference - it's at the Omni Shoreham Hotel. The web page features plenty of obfuscation/confusion which tries to link KR technology with encryption/security technology, suggesting that a combination of the two (or merely the former) is required to allow widespread use of the Internet for commerce and data transfer. If anyone happens to attend, I imagine that list subscribers would be interested in a summary of the comments, etc. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | Export jobs, not crypto. http://www.io.com/~gbroiles | http://www.parrhesia.com

3 3

"I have in my hand a working message recovery system"
by Tim May 17 Dec '03

17 Dec '03

(I've changed the thread name to "I have in my hand a working message recovery system." Some of you may know what this is a reference to.) At 12:47 PM -0700 10/27/97, Eli Brandt wrote: >Declan McCullagh wrote: >> >From my perch in Washington, I see PGP 5.5/CMR as an existence proof that >> key recovery can be done. So far the crypto-advocates have been able to >> wave around the Blaze et al white paper that says we don't know how to do >> it. Even Dorothy Denning agreed. But now when a mandatory GAK bill goes to >> the House floor, all Rep. Solomon etc. have to do is wave around a >> shrinkwrapped copy of PGP and say: "I bought this for $19 at the Egghead >> shop at 21st and L." Details will be lost in the fearmongering. > >Key detail lost: what the white paper says is that we don't know how >to do it *right*. Agreed, but this is just the kind of "detail" Congress is already so good at ignoring. Declan is right, that Congress will hold PGP 5.5 and its CMR and "Policy Manager" up and will say, "See, even industry is demanding message recovery. And here's a program that already does it." Granted, CMR will not meet FBI requirements for real-time access, and will not meet SIGIN/COMINT wishes for surveillance-friendly systems, but it's a start. I'll bet, as I said in a post a few hours ago, that if CMR is widely adopted, that various regulatory agencies like the FTC, SEC, OSHA, etc., will begin to impose rules about how and where CMR archives are stored.... Then the battle will be 80% over. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1