December 2003 - cypherpunks-legacy

Re: No matter where you go, there they are.
by mccoy＠communities.com 17 Dec '03

17 Dec '03

At 8:53 AM 4/10/96, Hal is rumored to have typed: > Peter - didn't they say that the checking station is also listening > to the satellites? That way they can tell that you are playing back > signals that you taped earlier because they won't match what the > satellites are broadcasting right now. There is going to be processing and network delay involved here (unless Denning et al have figured out some way to communicate faster than the speed of light), so drift between the what you report and what the checking station and repeaters are hearing _at that time_ is inevitable. This is the loophole which allows Peter's attack, a loophole which cannot be closed (because the spoofer can always claim to be on a slower link than she really is and there is nothing the verifiyer can do to prove otherwise.) If I want to pretend to be closer to the receiver than my true location I simulate a slow link which gives me enough time to record what the signals would be at the near location and then quickly resend them to give the appearance of the spoofed location. In fact, I think that this really all boils down to trying to use GPS as a non-interactive proof of location, and the information posted about the system does not address the obvious attacks on such systems which are known from research into ZNPs. > If their authenticated repeaters are used then you have to assume the > checking station has all the satellite signals and again the best you can > do is pretend to be a Mole Man. The authenticated repeaters may collect all signals, _but the receiving station does not get them all at once_ because it will take time for the signals to propogate from the repeater back to the station attempting to determine location. Having all of the signals does not help the checking station other than allowing it to share a set of sats with the person attempting to authenticate. It still does not And perhaps more importantly, do you really want anyone you connect to on the net to know your location to the nearest 10 meters? What is Dennings fascination with building Big Brother? jim

4 7

List of reliable remailers
by Raph Levien 17 Dec '03

17 Dec '03

I operate a remailer pinging service which collects detailed information about remailer features and reliability. To use it, just finger remailer-list(a)kiwi.cs.berkeley.edu There is also a Web version of the same information, plus lots of interesting links to remailer-related resources, at: http://www.cs.berkeley.edu/~raph/remailer-list.html This information is used by premail, a remailer chaining and PGP encrypting client for outgoing mail. For more information, see: http://www.c2.org/~raph/premail.html For the PGP public keys of the remailers, finger pgpkeys(a)kiwi.cs.berkeley.edu This is the current info: REMAILER LIST This is an automatically generated listing of remailers. The first part of the listing shows the remailers along with configuration options and special features for each of the remailers. The second part shows the 12-day history, and average latency and uptime for each remailer. You can also get this list by fingering remailer-list(a)kiwi.cs.berkeley.edu. $remailer{"extropia"} = "<remail(a)miron.vip.best.com> cpunk pgp special"; $remailer{"portal"} = "<hfinney(a)shell.portal.com> cpunk pgp hash"; $remailer{"alumni"} = "<hal(a)alumni.caltech.edu> cpunk pgp hash"; $remailer{"bsu-cs"} = "<nowhere(a)bsu-cs.bsu.edu> cpunk hash ksub"; $remailer{"c2"} = "<remail(a)c2.org> eric pgp hash reord"; $remailer{"penet"} = "<anon(a)anon.penet.fi> penet post"; $remailer{"hacktic"} = "<remailer(a)utopia.hacktic.nl> cpunk mix pgp hash latent cut post ek"; $remailer{"flame"} = "<remailer(a)flame.alias.net> cpunk mix pgp. hash latent cut post reord"; $remailer{"rahul"} = "<homer(a)rahul.net> cpunk pgp hash filter"; $remailer{"mix"} = "<mixmaster(a)remail.obscura.com> cpunk mix pgp hash latent cut ek ksub reord ?"; $remailer{"ford"} = "<remailer(a)bi-node.zerberus.de> cpunk pgp hash ksub ek"; $remailer{"robo"} = "<robo(a)c2.org> cpunk hash mix"; $remailer{"replay"} = "<remailer(a)replay.com> cpunk mix pgp hash latent cut post ek"; $remailer{"rmadillo"} = "<remailer(a)armadillo.com> mix cpunk pgp hash latent cut ek"; $remailer{"ecafe"} = "<cpunk(a)remail.ecafe.org> cpunk mix"; $remailer{"wmono"} = "<wmono(a)valhalla.phoenix.net> cpunk mix pgp. hash latent cut"; $remailer{"shinobi"} = "<remailer(a)shinobi.alias.net> cpunk mix hash latent cut ek reord"; $remailer{"amnesia"} = "<amnesia(a)chardos.connix.com> cpunk mix pgp hash latent cut ksub"; $remailer{"gondolin"} = "<mix(a)remail.gondolin.org> cpunk mix pgp hash latent cut ek reord"; $remailer{"tjava"} = "<remailer(a)tjava.com> cpunk mix pgp hash latent cut"; $remailer{"pamphlet"} = "<pamphlet(a)idiom.com> cpunk pgp hash latent cut ?"; $remailer{'alpha'} = '<alias(a)alpha.c2.org> alpha pgp'; $remailer{'gondonym'} = '<alias(a)nym.gondolin.org> alpha pgp'; $remailer{"lead"} = "<mix(a)zifi.genetics.utah.edu> cpunk pgp hash latent cut ek"; $remailer{"treehole"} = "<remailer(a)mockingbird.alias.net> cpunk pgp hash latent cut ek"; $remailer{"nemesis"} = "<remailer(a)meaning.com> cpunk pgp hash latent cut"; $remailer{"exon"} = "<remailer(a)remailer.nl.com> cpunk pgp hash latent cut ek"; $remailer{"vegas"} = "<remailer(a)vegas.gateway.com> cpunk pgp hash latent cut"; $remailer{"haystack"} = "<haystack(a)holy.cow.net> cpunk mix pgp hash latent cut ek"; $remailer{"ncognito"} = "<ncognito(a)gate.net> mix cpunk latent"; catalyst(a)netcom.com is _not_ a remailer. lmccarth(a)ducie.cs.umass.edu is _not_ a remailer. usura(a)replay.com is _not_ a remailer. Groups of remailers sharing a machine or operator: (c2 robo alpha) (gondolin gondonym) (flame hacktic replay) (alumni portal) Use "premail -getkeys pgpkeys(a)kiwi.cs.berkeley.edu" to get PGP keys for the remailers. Fingering this address works too. Note: The remailer list now includes information for the alpha nymserver. Last update: Mon 13 May 96 6:45:35 PDT remailer email address history latency uptime ----------------------------------------------------------------------- mix mixmaster(a)remail.obscura.com ++++++++++++ 4:10:52 100.00% alpha alias(a)alpha.c2.org +.+++++++++* 49:42 99.99% haystack haystack(a)holy.cow.net -*#*##+--++* 18:17 99.98% exon remailer(a)remailer.nl.com *******+***# 2:48 99.98% lead mix(a)zifi.genetics.utah.edu ++++++++++++ 37:55 99.97% amnesia amnesia(a)chardos.connix.com _. --+----++ 12:19:41 99.83% flame remailer(a)flame.alias.net ---+---+-+++ 2:44:17 99.81% c2 remail(a)c2.org +++++++++++* 46:01 99.75% alumni hal(a)alumni.caltech.edu #-### #*#### 7:16 99.69% vegas remailer(a)vegas.gateway.com ###**-***##* 1:07:26 99.64% ecafe cpunk(a)remail.ecafe.org ###*###+## # 7:38 99.60% portal hfinney(a)shell.portal.com #-## -# #### 5:07 99.57% shinobi remailer(a)shinobi.alias.net ***+**+* +** 37:06 99.26% penet anon(a)anon.penet.fi _ .____. 66:02:55 99.01% replay remailer(a)replay.com +********+* 5:20 98.53% treehole remailer(a)mockingbird.alias.net ---+++-+-- 2:07:49 86.55% extropia remail(a)miron.vip.best.com --.---- 8:00:07 48.50% History key * # response in less than 5 minutes. * * response in less than 1 hour. * + response in less than 4 hours. * - response in less than 24 hours. * . response in more than 1 day. * _ response came back too late (more than 2 days). cpunk A major class of remailers. Supports Request-Remailing-To: field. eric A variant of the cpunk style. Uses Anon-Send-To: instead. penet The third class of remailers (at least for right now). Uses X-Anon-To: in the header. pgp Remailer supports encryption with PGP. A period after the keyword means that the short name, rather than the full email address, should be used as the encryption key ID. hash Supports ## pasting, so anything can be put into the headers of outgoing messages. ksub Remailer always kills subject header, even in non-pgp mode. nsub Remailer always preserves subject header, even in pgp mode. latent Supports Matt Ghio's Latent-Time: option. cut Supports Matt Ghio's Cutmarks: option. post Post to Usenet using Post-To: or Anon-Post-To: header. ek Encrypt responses in reply blocks using Encrypt-Key: header. special Accepts only pgp encrypted messages. mix Can accept messages in Mixmaster format. reord Attempts to foil traffic analysis by reordering messages. Note: I'm relying on the word of the remailer operator here, and haven't verified the reord info myself. mon Remailer has been known to monitor contents of private email. filter Remailer has been known to filter messages based on content. If not listed in conjunction with mon, then only messages destined for public forums are subject to filtering. Raph Levien

1 0

Re: Free demo disk of "distorted number" crypto
by Mark O. Aldrich 17 Dec '03

17 Dec '03

On Fri, 10 May 1996, William Ono wrote: > On Fri, 10 May 1996, Mark O. Aldrich wrote: > > > technical. They are also offering a technical write-up via fax-back at > > 301.588.2162. > > I just called that number, but got no answer after ten rings. Could you > please verify it? I just checked it. It's working. It answered with the "menu" after two rings. Anyone else try using this thing? ------------------------------------------------------------------------- | Liberty is truly dead |Mark Aldrich | | when the slaves are willing |GRCI INFOSEC Engineering | | to forge their own chains. |maldrich(a)grci.com | | STOP THE CDA NOW! |MAldrich(a)dockmaster.ncsc.mil | |_______________________________________________________________________| |The author is PGP Empowered. Public key at: finger maldrich(a)grci.com | | The opinions expressed herein are strictly those of the author | | and my employer gets no credit for them whatsoever. | -------------------------------------------------------------------------

1 0

Report on Smart cards
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

Financial Times, 13 May 1996 Smart cards poised to mark revolution in data protection The poor image of the technology as "Big Brother's little helper" may be altogether undeserved, says Alan Cane The smart card -- a piece of plastic the size of a credit card with a computer embedded in it -- offers numerous benefits, but will force a re-evaluation of attitudes to privacy and data protection, says Demos, the independent think-tank. Its report, one of the first to analyse policy issues raised by the rapid proliferation of smart cards in areas such as finance, health and public administration, warns that the benefits will only accrue when people are confident the technology will not become "Big Brother s little helper", as the authors put it. Helpfully, Demos suggests policies to sidestep what it sees as a "sterile confrontation" between civil libertarians and authoritarian government and business interests in promoting the benefits of smart cards. "We have argued that people will trust in these technologies when they can choose anonymity where they want it and have greater control over the use of personal information held about them," say the authors. What distinguishes the smart card from other information technologies and gives it its power is the capacity to concentrate and manipulate a huge amount of information in a tiny space. A reading device is necessary to view the information, but smart cards compute as well as store data. Software can be incorporated to encode the data, rendering it unreadable to anyone without the right key. What can smart cards be used for? Their main use now is as telephone cards for public pay-phones, but they have the potential to identify individuals, to act as an electronic wallet for cashless shopping, and to provide a secure and portable information store. Medical histories could be stored on a smart card, for example, ready for recall by a doctor. Visionaries talk of virtually unlimited amounts of information distributed through society in a variety of forms -- the credit card model has been adopted for convenience rather than because of limitations inherent in microcomputers. Badges, pins and jewelry could all become "smart" accessories in the future. However, this sort of crystalgazing raises questions. For example, what information should be stored on a smart device? Who should be able to read it? The Demos researchers are critical of suggestions by Michael Howard, Britain's home secretary, that a smart card could be used as a national identity card: a government-issued, multi-functional card, with the populace having little or no choice about which applications were available on the card -- and perhaps no say about the privacy system employed. Regulation of the privacy system -- encryption -- is important. It is comparatively easy to devise encryption methods which are almost impossible to break within a reasonable period. That worries governments fearful of being unable to unpick communications from terrorists and the like. The US has attempted to forbid the export of the more powerful US cryptography systems. The Demos researchers argue that such tactics are counter-productive. They favour a private "key escrow", a system where cryptography users deposit the key to their system with a trusted private registry, approved and regulated by governments. "Government law enforcement agencies would have to obtain a court order on the basis that they had strong reason to believe that an individual or company that had escrowed their keys ... was guilty of some crime". The report proposes a radical reform of data protection legislation through some 10 supplementary conditions. Data users, for example, would have to get express consent from individuals for the use to which they would want to put the data. Rules on disclosure to third parties would be tightened, so that data users would have to receive specific permission from a data protection registrar in order to gain access to specific information. It argues that individuals should be able to choose the card they want, and decide what information and applications will be loaded. "Where [Michael Howard's] card is an essentially authoritarian instrument, our proposal is for a more market-based instrument in which the role of government is to align the incentives within the market to ensure privacy, trust and individual access and control," says the report. - On the Cards, by Perri 6 and Ivan Briscoe. Demos, 9 Bridewell Place, London EC4V 6AP. UK9.95. -----

1 0

Re: Mandatory Voluntary Self-Ratings
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 03:45 AM 5/13/96 EDT, E. ALLEN SMITH wrote: > the conservatives won't let people just rate > "objectionable" material in order to keep it from them. They want it off the > net/world whether or not it's rated. In the course of channel surfing, I have once or twice come across the Christians ranting about pornography. They have both legitimate and illegimate complaints, but mainly they emphasize the legitimate complaint. PICS addresses this legitimate complaint. Should cut the volume down considerably, or else force them to drop the hypocrisy, if indeed they are hypocrites. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: Civil liberties of employees (Re: FYB_oss)
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:15 AM 5/13/96, E. ALLEN SMITH wrote: >From: IN%"tcmay(a)got.net" 13-MAY-1996 00:55:07.93 > >>Actually, one _does_ check one's Constitutional rights "at the door" (of an >>employer), and the confusion over this issue is pervasively destroying real >>Constitutional rights. > >>For instance, if I hire someone, I can require him or her to wear a >>uniform, to not wear blue jeans to work, to not smoke (or even to smoke, if >>this is what the job involves), to take off his or her clothes, to tap >>dance, to not say anything to my customers, and on and on. If the >>government required these behaviors, this would be a legitimate issue, but >>not if employers set these conditions as terms of continued employment. > > In general, I agree... but one important point to make is the contract. >If the contract says that you can require the employee to tap dance, then you >can require the employee to tap dance. If the contract _doesn't_ require the Sure, I agree that _contracts_ can make a difference. But note that contracts are not a requirement of employment: I can, for example, hire someone to rake my leaves. If he decides that manual labor violates his "civil rights," I can give him the boot. No muss, no fuss, no contracts. (But contracts are of course possible. Enforcement of the terms is another matter. By the way, I think enforcement of such contracts should be handled outside the normal legal system, and paid for by the parties using the system.) --Tim Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

PGPShell & Eudora
by Michael E. Carboy 17 Dec '03

17 Dec '03

While trying to solve a corrupted clearsig problem with Eudora 2.2 and PGPShell, I noticed comments in the c-punks archives on this same problem. I wanted to pass on that Aegis Research's PGPShell "Beta4" version solves the problem and does "preprocess" the message before signing so that Eudora won't wreck it. The shell can be downloaded at http://aegisrc.com. It is self-extracting and, if installed in your existing PGPShell directory will create a subdirectory named "Pretty~1" (no, I am not kidding) and then install the new .exe there. Regards, MEC Michael E. Carboy carboy(a)hooked.net carboy(a)carboy.com Key fingerprint = C9 E9 79 12 43 76 A2 DB 1A 72 FD 04 F2 03 6F 8A -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAzDwxdIAAAEEAMmDaOXoZczvK4R7vH7ql+0sY/oHyqdtsjuOG8jbObnFjh2N jh3TAxyXGb83xmsm6Eb6muXf6oZJdTIzO7UuSwKh+afLg6un+LU7S/VTFTUf4QNq T1e2jZxcr33SFUxiKN7q83GkZhHyY1EeM/O8pGX+JhMANMv7gf9JSEYWhfvhAAUT tCVNaWNoYWVsIEUuIENhcmJveSA8Y2FyYm95QGhvb2tlZC5uZXQ+iQCVAwUQMPDG Lv9JSEYWhfvhAQF2VQQAqMj60pWt3+jZow8q/DFiM9Jw73rii2deJwfdju9vGWgU S6Se5TegVYlti8mWLF+mRSldEnRIKZs7mycW9YlVmfxa+uM2sTceoDIACkZy1MWF ULLeIzFDreR2YZLAVMQ4ToWTkRS2T+/jM8RQEMakPCYDIKBzCIuRQ7J+jmpR+Fs= =79nx -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Transitive trust and MLM
by eli+＠GS160.SP.CS.CMU.EDU 17 Dec '03

17 Dec '03

In article <+cmu.andrew.internet.cypherpunks+UlYwNe:00UfAM107VG@andrew.cmu.edu> EALLENSMITH(a)ocelot.Rutgers.EDU writes: > The different paths going through those different signatures will be >correlated/non-independent, yes.... but that isn't the problem unless you're >considering multiple paths (in a more complicated version). To determine key validity, you do have to consider all paths. If a single trusted path to the bad key exists, the attacker wins. > IIRC, there have been some sociological studies showing that _everyone_ >is linked through 6 or so people. Milgram's "small world" experiments used a much looser sort of "link" than we want here. It would be certainly interesting to know how large a difference this makes. > Now, there's the question of whether you _need_ to be linked to everyone - > [...] I see nothing wrong (and am in favor of) separation of the > elite from the masses. Gee, let me guess which group you're in... I'll go with "people I want to talk to" versus "people I don't want to talk to", thanks. It's true that you don't need to talk to everybody. The problem is that I might want to talk to people whom I don't know personally, but know by reputation, or by function ("DEA Rat Hotline" -- well, maybe not). -- . Eli Brandt usual disclaimers . . eli+(a)cs.cmu.edu PGP key on request . . violation of 18 U.S.C. 1462: "fuck".

3 2

Re: Civil liberties of employees (Re: FYB_oss)
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 9:34 AM 5/13/96 -0700, Timothy C. May wrote: >Sure, I agree that _contracts_ can make a difference. But note that >contracts are not a requirement of employment: I can, for example, hire >someone to rake my leaves. If he decides that manual labor violates his >"civil rights," I can give him the boot. No muss, no fuss, no contracts. But there is a very clear contract here. He rakes your leaves and you pay him the agreed amount. If he does not rake, he is in default and you don't pay him. If he rakes and you don't pay him, you are in default and he can probably collect thru small claims court. I have done consulting work here in Silicon Valley based on such contracts. (The value was low and I had assurance, from a mutual friend, that I was contracting with a man of honor. I did the work and got paid.) IMHO, it beats the hell out of 3 months dealing with corporate legal. ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

1 0

Re: Civil liberties of employees (Re: FYB_oss)
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ C'punks, At 09:34 AM 5/13/96 -0700, Timothy C. May wrote: >Sure, I agree that _contracts_ can make a difference. But note that >contracts are not a requirement of employment: I can, for example, hire >someone to rake my leaves. If he decides that manual labor violates his >"civil rights," I can give him the boot. No muss, no fuss, no contracts. There is an implicit contract. Most human interactions are conducted with implicit rather than explicit contracts, but with contracts none the less. Even "explicit" contracts are usually more implicit than you might think. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

CDT Policy Post 2.18 - Join Sen. Burns online TONIGHT (5/13) at 9:00 ET
by editor＠cdt.org 17 Dec '03

17 Dec '03

----------------------------------------------------------------------------- _____ _____ _______ / ____| __ \__ __| ____ ___ ____ __ | | | | | | | | / __ \____ / (_)______ __ / __ \____ _____/ /_ | | | | | | | | / /_/ / __ \/ / / ___/ / / / / /_/ / __ \/ ___/ __/ | |____| |__| | | | / ____/ /_/ / / / /__/ /_/ / / ____/ /_/ (__ ) /_ \_____|_____/ |_| /_/ \____/_/_/\___/\__, / /_/ \____/____/\__/ The Center for Democracy and Technology /____/ Volume 2, Number 18 ---------------------------------------------------------------------------- A briefing on public policy issues affecting civil liberties online ---------------------------------------------------------------------------- CDT POLICY POST Volume 2, Number 18 May 13, 1996 CONTENTS: (1) Join Senator Burns online TONIGHT (5/13) at 9:00 ET to discuss Privacy and Security on the Net (2) Subscription Information (3) About CDT, contacting us ** This document may be redistributed freely with this banner in tact ** Excerpts may be re-posted with permission of <editor(a)cdt.org> ----------------------------------------------------------------------------- (1) JOIN SENATOR BURNS ON HOTWIRED TONIGHT (5/13) AT 9:00 ET ON TO DISCUSS PRIVACY AND SECURITY ON THE NET Senator Conrad Burns (R-MT) will hold a second online 'town meeting' tonight to discuss recently introduced encryption legislation. The Promotion of Commerce Online in the Digital Era (Pro-CODE) Act of 1996 (S.1726), sponsored by Sen. Burns, Sen. Patrick Leahy (D-VT) and others, seeks to relax outdated and restrictive export controls on encryption. This online chat is the second chance in as many weeks for Netizens to participate in a discussion regarding this important legislation. We hope many concerned Internet users will take advantage of this rare opportunity to interact with a U.S. Senator who is leading the fight on an issue of great importance to the Net.community. DETAILS ON TONIGHT'S EVENT: * Monday May 13, at 9:00 pm ET (6:00 pm Pacific) on HotWired's "Wireside Chat". URL: http://www.hotwired.com/wiredside/ To participate, you must be a registered HotWired member (there is no charge for registration). You must also have RealAudio(tm) and a telnet application properly configured to work with your browser. Tonight's town meeting is the second in a series of planned events, and is part of a broader project coordinated by CDT and the Voters Telecommunications Watch (VTW) designed to bring the Internet Community into the debate and encourage members of Congress to work with the Net.community on vital Internet policy issues. Events with other members of Congress working on Internet Policy Issues are currently being planned. Stay tuned for future announcements. ---------------------------------------------------------------------------- FOR MORE INFORMATION ON THE ENCRYPTION POLICY DEBATE For more information on the Encryption Policy Debate, please visit CDT's encryption policy issues page at http://www.cdt.org/crypto/ You can also join CDT, VTW, EFF, EPIC, People for the American Way, Wired Magazine, and others in an online campaign to promote secure communications online. For more information, visit: * The Encryption Policy Resource Page -- http://www.crypto.com/ * The Internet Privacy Coalition Page -- http://www.privacy.org/ipc * EFF's Crypto Page -- http://www.eff.org/ * EPIC's Crypto Page -- http://www.epic.org/crypto * VTW's Crypto Page -- http://www.vtw.org/ ----------------------------------------------------------------------------- (2) SUBSCRIPTION INFORMATION Be sure you are up to date on the latest public policy issues affecting civil liberties online and how they will affect you! Subscribe to the CDT Policy Post news distribution list. CDT Policy Posts, the regular news publication of the Center For Democracy and Technology, are received by more than 9,000 Internet users, industry leaders, policy makers and activists, and have become the leading source for information about critical free speech and privacy issues affecting the Internet and other interactive communications media. To subscribe to CDT's Policy Post list, send mail to policy-posts-request(a)cdt.org with a subject: subscribe policy-posts If you ever wish to remove yourself from the list, send mail to the above address with a subject of: unsubscribe policy-posts ----------------------------------------------------------------------- (3) ABOUT THE CENTER FOR DEMOCRACY AND TECHNOLOGY/CONTACTING US The Center for Democracy and Technology is a non-profit public interest organization based in Washington, DC. The Center's mission is to develop and advocate public policies that advance democratic values and constitutional civil liberties in new computer and communications technologies. Contacting us: General information: info(a)cdt.org World Wide Web: URL:http://www.cdt.org/ FTP URL:ftp://ftp.cdt.org/pub/cdt/ Snail Mail: The Center for Democracy and Technology 1634 Eye Street NW * Suite 1100 * Washington, DC 20006 (v) +1.202.637.9800 * (f) +1.202.637.0968 ----------------------------------------------------------------------- End Policy Post 2.18 5/13/96 -----------------------------------------------------------------------

1 0

DCSB: The FSTC Electronic Check Project
by Robert Hettinga 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The Digital Commerce Society of Boston Presents Frank Jaffe, of The Bank of Boston and The Financial Services Technology Consortium (FSTC) "The FSTC Electronic Check Project" Tuesday, June 4, 1996 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA Frank Jaffe is a Senior Systems Consultant in the Applied Technology Group at the Bank of Boston. Frank is currently the project manager for the FSTC Electronic Check project which involves over 30 companies. Frank has played a leadership role in planning the amalgamation of Bank of Boston's five major retail computer systems into a single, common software system; acting as project leader for a new teller system, and leading the screen phone R&D project in cooperation with Northern Telecom and Bellcore. The FSTC Electronic Check project will develop an enhanced all-electronic replacement to the paper check. Electronic checks will be used like paper checks, by businesses and consumers, and will use existing inter-bank clearing systems. Like its paper counterpart, the Electronic Check represents a self contained "information object," which has all of the information necessary to complete a payment. Likewise, paper checkbooks are replaced by portable Electronic Checkbooks; pens & signatures are replaced by signature card functions and digital signatures using advanced cryptographic techniques; stamps and envelopes by electronic mail or other communications options such as the World Wide Web over the Internet. The fully automated processing capabilities of Electronic Checks opens the possibility of other types of financial instruments, such as electronic cashiers, travelers, and certified checks. Electronic check writing and processing will be integrated into existing applications, from cash registers to personal checkbook managers to large corporate accounting systems, to greatly increase the convenience, and reduce the costs, of writing, accepting, and processing checks. This meeting of the Digital Commerce Society of Boston will be held on Tuesday, June 4, 1996 from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, One Federal Street. The price for lunch is $27.50. This price includes lunch, room rental, and the speaker's lunch. ;-). The Harvard Club *does* have dress code: jackets and ties for men, and "appropriate business attire" for women. We need to receive a company check, or money order, (or if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, May 4, or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they *must* be made payable to "The Harvard Club of Boston". If anyone has questions, or has a problem with these arrangements (We've had to work with glacial A/P departments more than once, for instance), please let us know via e-mail, and we'll see if we can work something out. Planned speakers for the following few months are: July Pete Loshin Author, "Electronic Commerce" August Duane Hewitt Idea Futures We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the DCSB Program Commmittee, care of Robert Hettinga, rah(a)shipwright.com . For more information about the Digital Commerce Society of Boston, send "info dcsb" in the body of a message to majordomo(a)ai.mit.edu . If you want to subscribe to the DCSB e-mail list, send "subscribe dcsb" in the body of a message to majordomo(a)ai.mit.edu . Looking forward to seeing you there! Cheers, Robert Hettinga Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMZec9fgyLN8bw6ZVAQHb/wP9FrQXK4sCBRnfqNt2bJTzWX5BpxDC4NXY RZjQfNP6coAvjh1nc1gNVHcFFgCB2Mh8Mmt876gJr48JUfWpMIQ3XW4CKuqjY6NQ Bw/SRarICPNLSCMbsdX2kHYwi1OuMwkVYm9rXotF4byrDItdxursXacxvvdYyW/u mZMx+eXWq1E= =hXUa -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "If they could 'just pass a few more laws', we would all be criminals." --Vinnie Moscaritolo The e$ Home Page: http://thumper.vmeng.com/pub/rah/ ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "If they could 'just pass a few more laws', we would all be criminals." --Vinnie Moscaritolo The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Senator Burns at HotWired Today
by Jon Lebkowsky 17 Dec '03

17 Dec '03

Monday, 13 May 6 p.m. PDT Senator Conrad Burns in WiredSide Chat Senator Conrad Burns (R-Montana) has recently introduced legislation to make it easier for netizens to get strong, easy-to-use privacy and security tools for the Internet. The Pro-CODE bill (S. 1726) aims a silver bullet straight at the heart of the Clinton administration's unworkable Clipper and Clipper II schemes by rolling back Cold War-era regulations on the export of strong cryptography. Join us Monday, 13 May at 6 p.m. (Tuesday 01:00 GMT) to talk technology with Washington. -- Jon Lebkowsky <jonl(a)wired.com> http://www.well.com/~jonl Electronic Frontiers Forum, 7PM PST Thursdays <http://www.hotwired.com/eff>

1 0

TO ALL MEMBERS
by Mathew Ellman 17 Dec '03

17 Dec '03

TO ALL MEMBERS, IM TIRED OF ALL THIS SHIT I HAVE UNSUBSCRIBED MANY TIMES AND ALL I GET IS SOME STUPID ASS REPLY ABOUT CLOSED LIST OR ADDRESS NOT MATCHING AND I GET NO REPLY SO UNLESS YOU ALL WANT TO GET A BUNCH OF UN WANTED BULLSHIT (LIKE THE SHIT IM GETING FROM YOU ) I SUGEST SOMEONE FIND A WAY TO GET ME THE FUCK OFF THIS LIST . I HAVE GOT IN TOUCH WITH THE PESON THE REPLY TELL ME TO AND NO REPLY. IM TIRED OF ALL THIS SHIT.

3 2

[NOISE] Re: Notes from the SF Physical Cypherpunks meeting
by Peter Trei 17 Dec '03

17 Dec '03

> From: minow(a)apple.com (Martin Minow) > Subject: Re: Notes from the SF Physical Cypherpunks meeting [...] > The Swedish government has a rather strong tradition of protection > of individual privacy (encrypting COM e-mail is one example). [...] > Martin Minow > minow(a)apple.com Huh? 'a rather strong tradition of protection of individual privacy'? In Sweden, for many years you could (and for all I know, still) go to a public records office and look up all kinds of personal data on anyone, without restriction - you could, for example, find out your co-workers exact salaries if you were curious. My understanding is that Sweden's postion vis-a-vis the Internet has been particularly clueless, with international email technically a crime, and government officials who regard modems as criminal tools. I hope things have improved. Peter Trei (former resident alien in Sweden) ptrei(a)acm.org

2 1

Interest to punks in latest CACM
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

A Meeks article I think that would benefit some cypherpunks... - politics/effectiveness "Comparing Information Without Leaking It" - Fagin, Naor, Winkler - crypto/protocol "A Reengineerings Framework for Evaluating a Financial Imaging System" - certificate processing workflow redesign. _______________________ Regards, Men govern nothing with more difficulty than their tongues, and can moderate their desires more than their words. -Spinoza Joseph Reagle http://farnsworth.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

1 0

Re: Notes from the SF Physical Cypherpunks meeting
by minow＠apple.com 17 Dec '03

17 Dec '03

Thanks to everyone who took the trouble to correct errors in my notes from Saturday's Cypherpunks meeting. They were written for my own benefit -- and for the benefit of some friends who couldn't be there. Since I can give away information without losing it (to misquote Thomas Jefferson), I'm happy to share it with the cypherpunks. A comment from Matts Kallioniemi might be worth some further discussion: >>COM e-mail/bbs system (Sweden) -- operator could backup >>e-mail, but not read it. > >Sure. The database was encrypted by using XOR with the string >"KOM". That was the sorry state of encryption in the early eighties. > Encrypting the database with a fixed string offers a good example of how "locks keep honest people honest." This would prevent an operator from unintentionally reading a message in case it was revealed by, perhaps, a disk sector editor or crash dump. I suspect that the state of encryption in Sweden in the early eighties was somewhat stronger than XOR (wasn't Hagelin a Swede who moved to Switzerland to start Crypto AG?), but not necessarily visible to the general public. The Swedish government has a rather strong tradition of protection of individual privacy (encrypting COM e-mail is one example). For example, the initial Swedish implementation of a national criminal database in the mid 1970's (equivalent to the US NCIC) used dialback telexes to prevent unauthorized (and untracked) access. A recent newspaper article noted that some police officers were being investigated for unauthorized access to the personal information of a collegue who had complained of sexual harassment. Martin Minow minow(a)apple.com

3 2

CDA Dispatch #10: Last Day in Court
by Declan B. McCullagh 17 Dec '03

17 Dec '03

----------------------------------------------------------------------------- Fight-Censorship Dispatch #10 ----------------------------------------------------------------------------- The CDA Challenge: Last Day in Court ----------------------------------------------------------------------------- By Declan McCullagh / declan(a)well.com / Redistribute freely ----------------------------------------------------------------------------- In this dispatch: The DoJ's flimsy, cheesy, flawed defense Judges question DoJ investigation of CompuServe "The Newspaper Decency Act" http://pathfinder.com/Netly/daily/960513.html The Netly News May 13, 1996 PHILADELPHIA -- Anyone want to bet on the outcome of the Communications Decency Act? I attended the whole thing, which ended Friday in a Philadelphia federal court, and here's the McCullagh Morning Line: 3:1 that the CDA gets struck down as unconstitutional. It can't possibly be upheld -- not from what I understand about the First Amendment, not from what I heard of the flimsy, cheesy Justice Department case (and I heard the whole flimsy, cheesy defense) and certainly not from how the judges were acting on the last day of the hearing. Members of the three-judge panel practically laughed in exasperation at Justice Department wafflings. As you probably recall, The American Civil Liberties Union and American Library Association coalition challenged the so-called Decency Act on the grounds that it would unconstitutionally chill free speech online. The CDA would criminalize "indecent" speech on the Net, invoking a standard -- indecency -- that's yet to be defined. Not for lack of trying, of course. DoJ attorney Tony Coppolino danced a nimble flamenco around the legal meaning of "indecency" and what may or may not be prosecuted under the CDA, arguing on Friday that indecency is a "medium-dependent standard." That is, he said, it can be read to apply mostly to hardcore porn, not literature, and would leave most Web-based jottings alone. But he admitted: "We can't provide assurance that a prosecutor won't take on an absurd case." Dolores Sloviter, chief judge of the Third Circuit Court of Appeals, jumped down his throat: "I've been taking the position for 17 years that people should know what they can be prosecuted for. Doesn't that present a problem?" she asked. "I still don't understand" what indecency means under the CDA, she said. "We've been trying to get at this for 40 minutes," grumbled Judge Stewart Dalzell. Later Dalzell grilled DoJ attorney Jason Baron over the Justice Department's decision to "review" a complaint lodged by the American Family Association against CompuServe's new adults-only service. (The AFA is the most virulent "family values" group involved in the fight over the CDA. Only a week after the law was passed, the AFA said it didn't go far enough.) Dalzell stressed that CompuServe had employed every blocking and parental control mechanism possible under current technology -- but that didn't stop the FBI from investigating the Columbus, Ohio-based corporation. "What more could CompuServe have done?" Dalzell asked. Baron cavilled. "The Justice Department was concerned this may be obscenity," he claims. The distinction between obscenity, which is illegal, and indecency, which is still undefined, is important, and that was a nice try by Baron. Unfortunately for him, the CompuServe forum in question has only Playboy-style centerfolds -- softcore stuff that the DoJ's own attorney Coppolino admitted earlier is not obscene. Clearly, the Government had no business looking into the CompuServe matter. Indeed, outside the courtroom at the end of the day, the ALA's Bruce Ennis charged that the government violated a restraining order barring them from investigating alleged CDA violations. "We were very upset. We think this violated the court order," said Ennis. "We went to court yesterday and asked for a clarification. That's now pending." The only defense against prosecution and conviction that the government offered was requiring credit cards before providing access to "indecent" speech on web sites -- a solution that Baron admitted isn't exactly practical for individual speakers. When Baron trotted out Dan Olsen's -L18 self-tagging scheme as an alternative, even the normally quiescent Judge Ronald Buckwalter noticed: "It's not available now. It's a hypothetical." Judge Sloviter added it was "the product of Mr. Olsen's creative imagination." In final arguments, Chris Hansen from the ACLU said not only would a requirement for -L18-style self-labelling "violate the prohibition against compelled speech," there is no tagging technology "that applies to Usenet newsgroups and mailing lists." The most unusual sideshows of the last day of the hearing was when government attorneys were forced to defend free speech in print. Would a "Newspaper Decency Act" banning violence on the top of the front page be constitutional? asked Judge Dalzell, waving a copy of the Philadelphia Inquirer with a photograph of a Liberian prisoner being executed. "My ten-year old son is a rabid Phillies fan" and came across this image, he said. (We must confess to missing the logic here: Are Phillies fans particularly sensitive to violence?) "The print medium enjoys the greatest protections -- the Internet is becoming more television-like," replied Coppolino, trying to dodge the question. The Philadelphia court is expected to issue a decision by mid-June. Both the plaintiffs and the Department of Justice have said they will appeal to the Supreme Court, which may decide to hear the case after it reconvenes in early October. Assuming the Justice Department loses, will they really appeal to the Supreme Court? If so, I object to my tax money being wasted on this crap. --By Declan McCullagh ----------------------------------------------------------------------------- Mentioned in this article: DoJ refers American Family Association's CDA complaint to the FBI: <http://pathfinder.com/Netly/daily/960507.html> AFA "charges" CompuServe with violating the CDA: <http://fight-censorship.dementia.org/dl?num=2252> FBI finally rebuffs the AFA, when pressed: <http://fight-censorship.dementia.org/dl?num=2445> Excerpts from DoJ and anti-porn groups' CDA briefs: <http://fight-censorship.dementia.org/dl?num=2387> Transcript of Olsen's "-L18" description and other testimony: <http://www.cdt.org/ciec/transcripts/April_15_Olsen.html> Mike Godwin on indecency vs. obscenity: <http://www.cs.cmu.edu/~declan/articles/godwin.indecency.txt> This and previous Fight-Censorship Dispatches are available at: <http://fight-censorship.dementia.org/top/> <http://www.eff.org/pub/Legal/Cases/EFF_ACLU_v_DoJ/> <http://www.epic.org/free_speech/censorship/lawsuit/> To subscribe to the fight-censorship announcement mailing list for future Fight-Censorship Dispatches and related discussions, send "subscribe fight-censorship-announce" in the body of a message addressed to: majordomo(a)vorlon.mit.edu Other relevant web sites: <http://www.eff.org/> <http://www.aclu.org/> <http://www.cdt.org/> <http://www.ala.org/> -----------------------------------------------------------------------------

1 0

Re: Fingerprinting annoyance
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:26 PM 5/13/96, Mark O. Aldrich wrote: >On Mon, 13 May 1996, Senator Exon wrote: > ><snip> >> i can fill out and manipulate the card myself i just need a >> working method. >> is there no privacy advocate who can help me? >> > >I think most privacy advocates would advise, "Refuse to submit." It >sounds like you're looking for more of a hack on the fingerprinting process. And if you are working for me, and I ask for a fingerprint, and you refuse or "smear" the results (repeatedly, as the first smearing I may just take as your token protest and have you printed again), you'll be out the door by the end of the day. (Personally, I've never worked for a company which demands fingerprints, but I've worked for companies which demanded ID badges and signatures, and these are effectively as intrusive. And I suspect that my former employers are now using thumbprints, and maybe full prints.) What one "doesn't like" and considers an "invasion of privacy" varies from person to person. Some people think having their picture taken is a stealing of their soul. Others fear nefarious things will be done with the DNA from their blood samples. Trying to convince a company that photo ID badges and fingerprints are Bad Things is perhaps admirable, just realize that in a free society that employer is under no obligation to hire someone who refuses to go along with the company's security policies. (This relates to the "civil rights" thread.) >of like a key certificate. If you really can dork the card, have ten >different people volunteer one print each. There's no way that they'll >ever be able to use that as evidence in a court or for any other purpose, >either. A stupid idea. As the employer, I wouldn't have to prove it a court of law...suspicion alone that some of my employees were fucking up a security system might be enough for me to either a. promote them to the Tiger Team, or b. fire their asses. (I just can't understand where this pervasive meme is coming from here on this list, the notion that employers are severely limited in what they can do to employees unless they can "prove it in court. Like it or not, most employees in the United States are still employed "at will," and are not covered by employment contracts such as some executives and the like get.) >If you're forced to do this in person with a tech, you can continuously >"fight" the grip they have on your hand and smudge the card. However, Sure. It makes it easy for the employer to simply say "Next candidate." --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

Re: Civil liberties of employees (Re: FYB_oss)
by tcmay＠got.net 17 Dec '03

17 Dec '03

Professor Froomkin and I have many disagreements about the nature and direction of laws in the U.S. I think I was careful to couch my points in terms of what the law should be, not what it currently is. For example, I think it fully Constitutional to choose not to serve blacks in one's home, business, church, or whatever. Until fairly recently, the courts saw it this way as well. (I'm not referring to state-sponsored discrimination, such as keeping blacks and women from voting, or visiting government-paid-for facilities, etc) [This is a provocative statement to many. I can elaborate if there is real interest. Suffice it to say that if I operated a bookstore, or gym, or restaurant, or whatever, I would not personally choose to discriminate thusly. Though I might with regard to other (unspecified here) so-called minority groups. And it would be my free right to choose whom to hire, whom to do business with, whom to serve, and so on. It's pretty clear in the Constitution, as I see it, that the government is not empowered to tell people whom they may associate with and whom they _must_ associate with. Again, the so-called Civil Rights Movement, which had good origins in overturning clearly unconstitutional laws about voting (Jim Crow laws), state-enforced segregation, etc., has been carried to the point of interfering with the right of free association.] The current interpretation of the law makes it a crime for a restaurant to allow smoking (at least in many--and increasing--locales). The current interpretation (henceforth shortened to "CI" for brevity) says that a church may not discriminate on the basis of religious affiliation, and hence must not discriminate against Satanists. The CI says that a health club may not discriminate against women (but, interestingly, many health clubs here in my state of California are "women-only"). The CI says that if a white person uses the term "nigger" he may be convicted, in some jurisdictions, of a "hate crime," but if the coloreds use the term, it's OK. [Here in Santa Cruz, the term "black" has fallen into disfavor, and is dubbed a label of the whitemale patriarchy. Thus, we have "lesbians of color," "students of color," "queers of color," etc. As one leading thinker puts it, "all wymyn are people of color." Therefore, colored people, or coloreds, for short. We have come full circle.] >The issue here isn't a constitutional issue. It's a *statutory* right. >And a real one. Sex discrimination in employment is prohibited by law. >We can call this a "civil right" or something else, but the if the facts >alleged in the case to which TCM refers are as claimed, they seem to have >a fairly good case under the law as it stands. And there's a lot more >than skimpy outfits at issue, including a refusal to hire men for what are >allegedly food service jobs (gender may only be a determination of >employment if it is a bona fide occupational qualfiication, e.g. policing >the showers in the gym; gender is not a BFOQ for food service jobs.) It is not the business of any regulatory agency to _second-guess_ why I want my girls at my Hooters to wear skimpy outfits. In fact, there is no real doubt why the girls are dressed as they are. (Hint: the name.) The girls can choose to work for me, or not. No slavery is involved. (Of course, I also favor legalization of indentured servitude. The military is allowed to buy X years of labor by paying for a student's education, so why not IBM? It might actually help the unemployment crisis we are now in.) In any case, I choose to focus on politico-jurisprudential issues, of what the law _should_ be, not what the current mess says is the law. As Roseanne Barr--not one of my favorites--recently so cogently observed: "Heidi Fleiss is going to prison, OJ Simpson is playing golf in Brentwood...we're living in Dante's Inferno." --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Transitive trust and MLM
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"eli+(a)GS160.SP.CS.CMU.EDU" 13-MAY-1996 19:59:41.90 >EALLENSMITH(a)ocelot.Rutgers.EDU writes: >> The different paths going through those different signatures will be >>correlated/non-independent, yes.... but that isn't the problem unless you're >>considering multiple paths (in a more complicated version). >To determine key validity, you do have to consider all paths. If a >single trusted path to the bad key exists, the attacker wins. Hmm.... a useful distinction in this is between multiple paths with no common elements except the beginning and end and ones with common elements. The sections of the ones with common elements that have no common elements can probably be treated as a subset of the larger path - a virtual link, if you will - with its values (trustworthiness et al) determined by the paths contained within it. >> IIRC, there have been some sociological studies showing that _everyone_ >>is linked through 6 or so people. >Milgram's "small world" experiments used a much looser sort of "link" >than we want here. It would be certainly interesting to know how >large a difference this makes. Milgram? Thanks, I'll check for that name. >It's true that you don't need to talk to everybody. The problem is >that I might want to talk to people whom I don't know personally, but >know by reputation, or by function ("DEA Rat Hotline" -- well, maybe >not). I'm not disputing that... just that you don't need to be able to go through the web to reach everyone who's got a key. Admittedly, the subsection of people who have keys are more likely (through being more technologically sophisticated et al, on average) to be useful to contact than those who don't. -Allen

1 0

Re: Civil liberties of employees (Re: FYB_oss)
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"tcmay(a)got.net" 13-MAY-1996 17:56:08.53 What others have said in regards to implicit contracts is about what I would have, with the addition that the inclusion of some third party should occur to handle the cases when the contract (explicit or implicit) doesn't cover something. Such a third party would preferably be an arbitration agency chosen by the other parties to the contract, but can be a government if they didn't chose one or the agency isn't available for some reason. >(But contracts are of course possible. Enforcement of the terms is another >matter. By the way, I think enforcement of such contracts should be handled >outside the normal legal system, and paid for by the parties using the >system.) One organization that I would like to see develop is one specializing in the enforcement of extralegal/illegal contracts. Payments to a legal form of such an organization should be tax-deductible, just as payments to private security guards should be tax-deductible; you're doing the government's work for it, so you shouldn't have to pay the government for it. Cryptography can be used to reduce the necessity for such in many cases, or at least reduce the work involved - which should reduce the fees that such an organization should need to pay. One aspect of this is digital receipts; I need to take a look at Applied Cryptography to check out the discussion there on them. Anyplace else I should look? -Allen

1 0

Re: Civil liberties of employees (Re: FYB_oss)
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"froomkin(a)law.miami.edu" "Michael Froomkin" 14-MAY-1996 03:24:06.58 >On Sun, 12 May 1996, Timothy C. May wrote: >> Actually, one _does_ check one's Constitutional rights "at the door" (of an >> employer), and the confusion over this issue is pervasively destroying real >> Constitutional rights. >Yes and no...and kinda no. Umm... you would appear to be discussing the current legal situation, whereas TCMay was discussing what the situation _should_ be. In the limits you discuss, the civil liberties of the _employer_ are being seriously trampled upon. -Allen

1 0

Re: Mandatory Voluntary Self-Ratings
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"jamesd(a)echeque.com" 13-MAY-1996 23:52:07.00 At 03:45 AM 5/13/96 EDT, E. ALLEN SMITH wrote: >> the conservatives won't let people just rate >> "objectionable" material in order to keep it from them. They want it off the >> net/world whether or not it's rated. >In the course of channel surfing, I have once or twice come across >the Christians ranting about pornography. They have both legitimate >and illegimate complaints, but mainly they emphasize the legitimate >complaint. PICS addresses this legitimate complaint. I've never heard a fundamentalist (there are other Christians than fundamentalists, BTW) ranting about how they can be exposed to pornography; it's always others they claim to be upset about. I was raised a Southern Baptist, so I suspect I'm familiar with fundys. -Allen

1 0

Copyright law - potential limits on encryption?
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

I thought the following from CPSR had some relevance, insofar as part of what the proposed law is trying to outlaw are "devices needed for making use of encrypted information." The accusations of corporate benefit are irrelevant, of course. -Allen From: akrause(a)Sunnyside.COM (Audrie Krause) Subject: Action Alert: Copyright Cyber-rights moderator Andy Oram and online activist Jim Warren have forwarded alerts regarding pending Congressional action on copyright legislation. At this late date, the best course of action is a phone call or fax. You can reach all members of Congress through the capitol switchboard: (202) 224-3121. Email messages to Congress are *not* particularly effective. Detailed information follows from both Jim and Andy. Audrie ---------------------------- >From Jim Warren: Check out the examples, below, of how your net access to *any* information will soon be repressed, prohibited and/or criminalized for corporate benefit. THIS REALLY IS AS BAD AS IT SOUNDS. Although this happens to come from the Americal Library Association and is thus focused on library concerns with the Beltway ripoff-artists' pervasive copy-suppression legislation that is being rammed through Congress, *everyone* online and on computers needs to be aware of this impending repression. I donno who Clinton's Copyright Office and Gingrich-Dole's Congress are representing, but they sure as hell aren't representing the *public's* interests. Howl now to your(?) "representatives" ... or bend over for the corporate hustlers, henceforth. --jim, a disloyal subject of the Washington Royalty Jim Warren, GovAccess list-owner/editor, advocate & columnist (jwarren(a)well.com) 345 Swett Rd., Woodside CA 94062; voice/415-851-7075; fax/<# upon request> ------------------------ >Date: Fri, 10 May 1996 17:58:00 -0400 >Sender: owner-ala-wo(a)ala1.ala.org >From: ALAWASH E-MAIL (ALAWASH E-MAIL) <alawash(a)ALAWASH.ORG> >To: ala-wo(a)ala.org >Subject: ALAWON, Vol. 5, No. 24 - ACTION ITEM (220 lines) > > >ALAWON Volume 5, Number 24 >ISSN 1069-7799 May 10, 1996 > American Library Association Washington Office Newsline > > > URGENT: IMMINENT CONGRESSIONAL ACTION ON NII COPYRIGHT >LEGISLATION THREATENS TO LEAVE LIBRARIES AND SCHOOLS IN THE LURCH > >IMMEDIATE ACTION NEEDED: Your immediate faxes and calls to key >House Committee Members critical. > >BACKGROUND: >The House is rushing the "NII Copyright Protection Act" bill to >"mark up" in the House Courts and Intellectual Property >Subcommittee on Wednesday of next week, May 15! The House >completed its hearings in February on this bill. (Earlier >ALAWON's have described in detail the "NII Copyright Protection >Act" taken from the Administration's "White Paper" and introduced >in Congress last September.) > >Worse yet, the Courts and Intellectual Property Subcommittee is >also considering wrapping the Copyright Term Extension Act (which >would lengthen the term of copyright protection by 20 years) into >the "NII Copyright" package on May 15. That action could short-circuit >negotiations between ALA and copyright owners that began >last October to craft an exemption from the term extension for >libraries, archives and non-profit educational institutions. If >approved in its current form, the bill would: > >*** make it a copyright violation to simply browse the Net >without a license from copyright owners; > >*** subject computer system operators -- such as on-line services >and networks at schools and libraries -- to potentially crippling >liability for the copyright violations of their users, even if >the operator; > >*** cripple "distance education" efforts especially vital to >rural communities and the disabled; and > >*** make it illegal to manufacture, import or distribute devices >and software (including computers and VCRs) needed by industry, >schools and libraries to make "fair use" of encrypted information >by overruling long-standing Supreme Court precedent. > >The Senate is moving deliberately on this tremendously imbalanced >package and has indicated that changes in it need to be made to >protect libraries and schools. The Senate Judiciary Committee, >which just held the first of its own (non-joint) hearings on this >bill on May 7, and is taking a far more deliberate approach to >these complicated issues. > >In fact, Chairman Hatch appeared open at the hearing to many of >the proposals backed by libraries and educational groups put >forward by Prof. Robert Oakley (of AALL) on behalf of the Digital >Future Coalition, in which ALA has been very active. (The DFC >was given one of only five total witness slots at this important >hearing held coincidentally on ALA's annual Legislative Day.) >Sen. Hatch also indicated that he would hold at least one >additional hearing which is likely to include a "library" >witness. > >ACTION NEEDED NOW: >Please immediately fax a letter to AND CALL all Members of the >House Intellectual Property Subcommittee listed below who >represent you or an institution with which you are affiliated. >These contacts must be made NO LATER THAN Tuesday, May 14 and >preferably sooner. Contact info and a sample letter follow. > >For more information about the bill, the dangers it poses and the >constructive solutions offered, please see the DIGITAL FUTURE >COALITION WEBSITE at http://www.ari.net/dfc > >*************************************************************** >Using appropriate style for addressing Congress, please address >all letters to Members, as listed below e.g., "2346 RHOB" for >"Rayburn House Office Building", LHOB=Longworth and CHOB=Cannon) >+ Washington, DC 20515. > >Info appears as: > >Member and Home City >Address Phone Fax > >Carlos Moorhead Glendale, CA >2346 RHOB 225-4176 226-1279 > >F. James Sensenbrenner Brookfield, WI >2332 RHOB 225-5101 225-3190 > >George Gekas Harrisburg, PA >2410 RHOB 225-4315 225-8440 > >Howard Coble Asheboro, NC >403 CHOB 225-3065 225-8611 >Elton Gallegly Oxnard, CA >2441 RHOB 225-5811 225-1100 > >Charles Canady Lakeland, FL >1222 LHOB 225-1252 225-2279 > >Bob Goodlatte Roanoke, NC >123 CHOB 225-5431 225-9681 > >Martin Hoke Fairview Park, OH >212 CHOB 225-5871 226-0994 > >Sonny Bono Palm Springs, CA >512 CHOB 225-5330 225-2961 > >John Conyers, Jr. Detroit, MI >2426 RHOB 225-5126 225-0072 > >Patricia Schroeder Denver, CO >2307 RHOB 225-4431 225-5842 > >Howard Berman Mission Hills, CA >2231 RHOB 225-4695 225-5279 > >Rick Boucher Abingdon, VA >2245 RHOB 225-3861 225-0442 > >Jerry Nadler New York, NY >109 CHOB 225-5635 225-6923 > >Xavier Becerra Los Angeles, CA >1119 LHOB 225-6235 225-2202 > >Xavier Becerra Los Angeles, CA >1119 LHOB 225-6235 225-2202 > > SAMPLE LETTER > **************************************************************** > > [DATE] > >[Hon. ____________________ >United States House of Representatives] >__# __ ____ Office Building >Washington, D.C. 20515 > >Dear Representative__________: > > As a member of the American Library Association and an >active {your connection to libraries and their work, e.g., >librarian, trustee, volunteer, etc.}, I am writing today to ask >that you do everything in your power to assure that two bills now >pending before the House Courts and Intellectual Property Subcom- >mittee are not voted out of Committee unless and until they are >amended to help libraries serve the public in the following ways. > > First, the "NII Copyright Protection Act of 1995" (H.R. >2441) must be changed to permit libraries to use the latest >technologies to preserve crumbling older works and to have >sufficient copies of those works on hand to guarantee their >survival. Provisions that will continue to foster "distance >education" also are critically important. More broadly, balance >must be restored to the legislation by adopting a series of >amendments proposed by the Digital Future Coalition (DFC), many >of which are based on a strong commitment to the Fair Use >Doctrine. I share that commitment. If Congress is to update >copyright law for the digital age, the rights of copyright owners >and the needs of information users must both be fully respected >and advanced. I support the DFC's package of amendments to the >Copyright Act, particularly those related to Sections 106, 107 >and 108. > > Second, and just as critically, the "Copyright Term >Extension Act"(H.R. 989) must also be rebalanced to protect and >foster library preservation efforts and education at all levels. >In its current form, this bill would extend the length of >copyright in published materials by 20 years. It would also >lengthen the term of copyright for unpublished works by 10 years. >In other words, the bill will impose a 10 or 20 year moratorium >on works entering the public domain. The costs of tracking down >the owners of these works (often 100 or more years old) imposes >costs on libraries better spent on serving the public. ALA's >representatives in Washington have been negotiating a suitable >amendment to this bill with major copyright industries since >December of last year. The Register of Copyrights is mediating >those talks. Please do everything that you can to allow that >process, which I am told is going well, to bear fruit. Premature >action on this bill would be disastrous for libraries and >schools. > > Thank you very much for helping libraries make the most of >new technology and the Internet to bring the benefits of >information technology to all Americans, and especially those in >[INSERT THE NAME OF YOUR STATE, CITY OR COUNTY REPRESENTED BY THE >MEMBER TO WHOM YOU'RE WRITING]. ALA's Washington Office staff >would be pleased to provide you or your office with more >information. They can be reached at 202-628-8410. > > Sincerely, > >_________________________________________________________________ >ALAWON is a free, irregular publication of the American Library >Association Washington Office. To subscribe, send the message >"subscribe ala-wo [your_firstname] [your_lastname]" to <listproc >@ala.org>. ALAWON archives gopher.ala.org; select Washington >Office Newsline. Web page HTTP://www.ala.org/alawashington.html. > >ALA Washington Office 202.628.8410 (V) >1301 Pennsylvania Ave., NW, #403 202.628.8419 (F) >Washington, DC 20004-1701 Lynne E. Bradley, Editor ><alawash(a)alawash.org> <leb(a)alawash.org> >Contributor to this issue: Adam M. Eisgrau > <ame(a)alawash.org> > >All materials subject to copyright by the American Library >Association may be reprinted or redistributed for noncommercial >purposes with appropriate credits. --------------- >From Andy Oram: (Introduction from moderator: the message below does not explain how all the awful consequences it predicts could stem from some extensions to copyright law. I think the worrisome section of the bill is the one prohibiting "any device, product, or component incorporated into a device" that can circumvent copyright. Despite language about its "primary purpose," such language could be used against legitimate computer and communications equipment.--Andy) Sender: John Whiting <100707.731(a)CompuServe.COM> ---------- Forwarded Message ---------- From: Labor Committee on the Middle East, INTERNET:melblcome@igc.apc.org TO: Democracy Now and Then, INTERNET:DEMOCRACY-NOW@IGC.APC.ORG Forum KPFA, INTERNET:FREEKPFA@COCO.CA.ROP.EDU (unknown), INTERNET:PACNEWS@AOL.COM (unknown), INTERNET:PNN@IGC.APC.ORG DATE: 12/05/96 02:35 RE: Action Needed on Intellectual Property Bill URGENT MESSAGE: Below is an alert regarding the May 15 Mark-up of HR 2441. Please post this text on your Web Sites and forward it to all interested parties. Specific efforts should be made to have people in the districts of members of the IP Subcommittee contact their representatives. A link to the DFC Web Site can be made by linking your Web Site to http://www.ari.net/dfc -- a thumbnail graphic for the link can be found at http://www.ari.net/tlogo.gif Suggested text for letters to Representatives will follow shortly. ************************************************************** YOUR IMMEDIATE FAXES AND CALLS TO CONGRESS NEEDED TO SLOW IMMINENT ACTION ON BADLY FLAWED CYBERSPACE COPYRIGHT BILL Congressional contacts urgently needed NO LATER THAN Tuesday, May 14.................. Next Wednesday, May 15, the House Judiciary Committee's Intellectual Property Subcommittee is scheduled to consider amendments to, and vote on approval of HR 2441, the "National Information Infrastructure Act of 1995." Such approval, if given, would give an important boost to passage of a legislative package heavily backed by -- and tilted in favor of -- the movie, recording, and publishing industries (and other large "content providers"). If passed in its current form, the bill would: *** make it a copyright violation to simply browse the Net without a license from copyright owners; *** subject computer system operators -- such as on-line services and networks at schools and libraries -- to potentially crippling liability for the copyright violations of their users, even if the operator; *** cripple "distance education" efforts especially vital to rural communities and the disabled; and *** make it illegal to manufacture, import or distribute devices and software (including computers and VCRs) needed by industry, schools and libraries to make "fair use" of encrypted information by overruling long-standing Supreme Court precedent. WRITE AND CALL MEMBERS OF THE HOUSE JUDICIARY INTELLECTUAL SUBCOMMITTEE AND KEY FULL COMMITTEE MEMBERS NOW (list and information below)!!! Tell them that: ** These issues, and the healthy development of the Net are of critical concern to you, AND ** The May 15 meeting of the Intellectual Property Subcommittee is **too soon**. Congress should take the time needed to understand and adequately deal with **all ** of the complicated issues raised by HR 2441 before it takes action. For more information about the bill, the dangers it poses and the constructive solutions offered, please see the DIGITAL FUTURE COALITION Website at http://www.ari.net/dfc. Please get your faxes and calls to the following members of Congress, especially those Members who represent you, NO LATER THAN Tuesday, May 14: [DATE] The Honorable {name} United States House of Representative __#__ ____ Office Building Washington, D.C. 20515 Dear Representative__________: I am writing today to ask that you do everything in your power to assure that no action is taken by the House Subcommittee on Intellectual Property on the "NII Copyright Protection Act of 1995" (HR 2441) until a broad consensus can be reached on how to resolve a number of issues of critical mportance to me and, in my view, the future of the Internet. As I understand it, this bill in its current form, would seriously undermine the ability of businesses, inventors, schools and librraies to make full use of the Internet's great potential. Specifically, H.R. 2441 would : * make it a copyright violation to simply browse the Net without a license from copyright owners; * subject computer system operators -- such as on-line services and networks at schools and libraries -- to potentially crippling liability for the copyright violations of their users, even if the operator has no knowledge of such violations; * thwart "distance education" efforts especially vital to rural communities and the disabled; and * make it illegal to manufacture, import or distribute devices and software (including computers and VCRs) needed by industry, schools and libraries to make "fair use" of encrypted information by overruling long- standing Supreme Court precedent. Please don't allow the fears of major copyright owning industries to cripple the Internet for the rest of America. I urge you and other members of the House Judiciary Committee to take the time necessary to understand and thoroughly debate all of the proposed amendments to H.R. 2441, including those proposed by the Digital Future Coalition. Thank you very much for helping make the most of new technology and the Internet to bring the benefits of information technology to all Americans, and especially those in [INSERT THE NAME OF THE DISTRICT/CITY]. Sincerely, ALERT (fwd) END ~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=-=~-~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=-=~ Posted by Andrew Oram - andyo(a)ora.com - Moderator: CYBER-RIGHTS (CPSR) Cyber-Rights: http://www.cpsr.org/cpsr/nii/cyber-rights/ ftp://www.cpsr.org/cpsr/nii/cyber-rights/Library/ CyberJournal: (WWW or FTP) --> ftp://ftp.iol.ie/users/rkmoore Materials may be reposted in their _entirety_ for non-commercial use. ~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=-=~-~=-=-=-=-=-=-=-=~=-=-=-=-=-=-=-=-=~ -- Audrie Krause CPSR Executive Director PO Box 717 * Palo Alto, CA * 94302 Phone: (415) 322-3778 * Fax: (415) 322-4748 * * E-mail: akrause(a)cpsr.org * * * Web Page: http://www.cpsr.org/home.html *

1 0