December 2003 - cypherpunks-legacy

Tamper-Resistant Software from INTEL
by Scott Guthery 17 Dec '03

17 Dec '03

Has anybody heard of tamper-resistant software in general or a method for tamper-resistant software from Intel in particular? -*-*-*-*-*-*-*- http://www.snailbox.com -*-*-*-*-*-*-*- Scott Guthery Home: 1 512 266 1278 The SnailBox Work: 1 512 331 3774 12417 River Bend #6 FAX: 1 512 331 3059 Austin, Texas 78732 Email: guthery(a)snailbox.com

3 2

FLITE is now on the web
by John Fricker 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- http://www.fedworld.gov/supcourt/index.htm 7000 supreme court decisions from 1937 to 1975 -----BEGIN PGP SIGNATURE----- Version: 2.9 iQCVAgUBMkhnzbuA0owOB/fpAQEKWwQArJwMFrL5kVXSYfNC9I8T8bzi+8D8Zdma vZj84TB+2KmW28wuFvbxnVE02MT4DMkwTYR8NQpGfAxsHHkOCOzkasdVB1IRpnpP RUuZsyQ3Iabm3q7INywMcy+c+u+5bl6stzYAlKVypsmPYJh0J9TSnhH5zN+xdowG /6dj+90GGNc= =/4qd -----END PGP SIGNATURE-----

1 0

Re: AP
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Derek Bell <dbell(a)maths.tcd.ie> writes: > In message <6XJquD10w165w(a)bwalk.dm.com>, "Dr.Dimitri Vulis KOTM" writes: > >There is no such thing as an "ordinary citizen". When the U.S. commits > >war crimes in Korea, Viet Nam, Grenada, Panama, Somalia, Iraq, and elsewhere > >every American taxpayer is an accomplice and a fair game. Likewise, any > >Britih subject is fair game for IRA's self-defense against centuries of > >British genocide and oppression. > > An odd attitude to take - personally, I only hold people responsible > for what they did, not what their government did. In Dimitri's scenario, > the IRA could justify killing any British citizen for the British government' > actions - even if that citizen _supported_ the IRA or agreed with its aims. Yes, I do. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Re: Anonymous remailer information <unsolcitied NOISE>
by Ted Garrett 17 Dec '03

17 Dec '03

On Tue, 24 Sep 1996, Super User wrote: > Hello! > > Thank you for your interest in our anonymous service. We > believe our remailer to be the best on the 'Net. Wasn't aware I'd asked for any information regarding your 'anonymous' service. Whether you believe it to be the best on the net or not, I was completely unaware of it's existence. > The service costs $5.00 a month and will allow you to send > mail anywhere on the internet with a false ("spoofed") return > address. THIS IS INTENDED FOR ENTERTAINMENT PURPOSES ONLY! Hmm... I've heard of remailers being run for legitimate reasons like protecting freedom of speech, allowing a means to disseminate information anonymously, and simply protecting the identity of the person sending the message, but never for ENTERTAINMENT PURPOSES ONLY... > Q: How does the service work? Ok, I'll bite.. > A: You simply send your letter to anon(a)interlink-bbs.com, > following the format which we will detail when you > subscribe, and your letter will be remailed with the new > return address. Don't I encrypt it first with the public key of your remailer? Otherwise, how can I instruct the mailer which next hops to make? And since I'm sending all this in the clear to your remailer, don't I end up being open for a man in the middle attack, traffic analysis, and just plain anybody with a sniffer on my ISPs terminal servers. > Q: Can I post to USENET with your remailer? > A: Yes, if you use a gateway. We will provide complete > instructions at your request (assuming you have an account). Ah, so I can post the hundreds of kiddie porn pics I have through your service and be moderately untraceable? > Q: Can I send files? > A: If you uuencode them first, yes. Well, naturally. Most mail systems on the internet have serious problems digesting binary objects. Oh, I guess you were expecting that I'd use the Microsoft Mailer... > Q: May I test your service for free? > A: No. Yet another question I didn't ask. > Q: Does anyone ever complain about receiving mail which > has been forwarded from InterLink? > A: Sometimes. What we do is we block the address of > the complainer so that no more mail may be forwarded to > that address. Sounds like a plan. Can I have my name removed from your unsolicited mailing list this way? When I start running a remailer service, I think I'll adopt that strategy, if possible. Of course, MY remailer will be a cypherpunks style remailer or a mixmaster. And it'll be free, too. Of course, people will need to know a little bit about crypto and privacy to use it... but hey, ya gotta keep out the riff-raff somehow. > Repeated complaints will result in your account being closed. > This has not been a problem in the past, however, perhaps > because no one knew to whom a complaint could be sent! Or perhaps because no one in their right minds believes your remailer to be anonymous.

1 0

Fruitcake Politics cont. [Noise]
by hallam＠ai.mit.edu 17 Dec '03

17 Dec '03

>You're wrong on at least three counts: I absolutely do claim to be a >libertarian, for one. And Mr Dupont claims to be the Dalai Lama... >Secondly, while I advocate a system which I call AP, >I do not "advocate" the MISUSE of that system for the act of attacking >people who have no initiated force or fraud. In the diatribe you proceed to spew forth you define "fraud" as tax collection. In other words you are calling for the murder of the members of the IRS. I don't consider your position to be distinguishable from that of the Oaklahoma city bombers. Interestingly enough the paragraph that begins by claiming there are at least three points runs out of steam after only two. In fact it is not argued from a classical libertarian or liberal position as claimed. The classical liberal position is that there are no rights without law so AP is self contradictory. I consider the authority of Rawls and Cohen on this one somewhat more persuasive than Bell. Mills certainly argues from this position but I can't claim to have discussed it with Mills :-) I don't think that Nozdic would accept the argument either. It is entirely from false analogies. In law the right of self defense is limited. You are not entitled to kill someone if you fear that they might tread on your toe. The force used has to be both necessary and commensurate. To argue that one is entitled to murder IRS agents because you disagree with the legitimacy of taxes is certainly not a liberal position. It also wont do to disown the consequences of the scheme. Of course it would be the perfect scheme for getting rid of unwanted spouses etc. Simply dismissing this as an "unfortunate" side effect is not credible. Its like Teller's scheme to build a second panama canal using A bombs, describing the radiation damage caused as an unfortunate side effect. Phill

1 0

[EFG] Fwd: Ga. Internet Law Challenged
by camcc＠abraxis.com 17 Dec '03

17 Dec '03

>X-Sender: smcclain(a)pop.atl.mindspring.com >Date: Tue, 24 Sep 1996 16:47:07 -0400 >To: efg-action(a)ninja.techwood.org >Reply-To: efg-action(a)ninja.techwood.org > >>From: AOLNewsProfiles(a)aol.net >>Date: 96-09-24 15:25:54 EDT >> >>.c The Associated Press >> ATLANTA (AP) -- The American Civil Liberties Union and computer >>activists filed suit Tuesday challenging a new Georgia law they >>contend restricts free speech in cyberspace. >> ``Fundamental civil liberties are as important in cyberspace as >>they are in traditional contexts,'' said Ann Beeson, an ACLU >>attorney who specializes in computer law. >> Plaintiffs in the suit filed in federal court also include state >>Rep. Mitch Kaye, R-Marietta, who fought the law's passage, and >>Electronic Frontiers Georgia, a computer liberties organization. >> The law took effect July 1. It bars computer users from falsely >>identifying themselves, a provision which critics contend makes it >>illegal to use pseudonyms in electronic messages sent by computer. >>Some computer services allow users to send messages that identify >>them only by a pseudonym or account number. >> The law also makes it a crime for someone to use a company's >>trademark or symbol without permission. Critics argue that could >>make criminals of Web page owners who have established links to >>help users move quickly from their pages to those of corporate >>America. >> Robert Costner of Electronic Frontiers Georgia said that aspect >>of the law could subject his own group to penalties because its Web >>page provides a link to BellSouth's page to assist computer users >>in contacting the company about a recent rate increase. >> Rep. Don Parsons, R-Marietta, who steered the law to passage, >>has said critics are overreacting. >> The law only makes it illegal for a person to misrepresent >>himself on the network, posing as someone or something else, he >>noted. >> ``If somebody uses that type of data, such as a trade name, to >>identify themselves as some other organization, then they clearly >>are seeking to defraud,'' Parsons said last spring. >> Gov. Zell Miller signed the bill April 18 despite a warning from >>the attorney general that it was vague and a plea for a veto from >>the San Francisco-based Electronic Frontier Foundation, which >>called the measure an unconstitutional restraint on free speech >>rights. >> Ms. Beeson said the suit appears to be the first legal challenge >>in the country to an individual state's attempt to regulate the >>Internet. >> ``If 50 states pass 50 contradictory laws, Internet users will >>be virtually paralyzed for fear of violating one or more of those >>laws,'' she said. >> AP-NY-09-24-96 1523EDT >> Copyright 1996 The Associated Press. The information >>contained in the AP news report may not be published, >>broadcast, rewritten or otherwise distributed without >>prior written authority of The Associated Press.

2 1

Re: We removed radikal 154 from xs4all :(
by James A. Donald 17 Dec '03

17 Dec '03

At 09:28 AM 9/24/96 -0400, pjb(a)ny.ubs.com wrote: > i was under the impression that germany's goal was to stop the distribution > of radikal 154 by xs4all, not by 50 mirror sites. they seem to have > accomplished their goal. do you really think that they will let a little > thing like reason stand in their way when claiming victory? Your impression was wrong. Let us just run through the sequence of events. A bunch of leftover commies publish some boring commie crap in Germany, which probably most people would have ignored. Thugs with truncheons shut them up, making large numbers of "preventative" arrests. (A "preventative" arrest is when you have done nothing illegal, let alone wrong, but they arrest you anyway.) Result: big publicity on the internet, dead silence in the "free" german press. Germany tries to shut up the internet. Result: Even bigger publicity. Sounds like a defeat for Germany to me. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

3 2

Re: We removed radikal 154 from xs4all :(
by James A. Donald 17 Dec '03

17 Dec '03

At 05:32 PM 9/23/96 -0700, Timothy C. May wrote: > That xs4all eventually capitulated has to be seen as a win for Germany. That the net community did not capitulate has to be seen as a loss for Germany. > They will probably now turn their sights on other sites (no pun intended), > hoping to pick off each one in turn. If they do, it will make The church of scientology look like a minor squabble. Every time one site capitulates, it will inspire two dozen others to join the fray. I joined the fight *because* xs4all had to capitulate. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

Medical Data
by tcmay＠got.net 17 Dec '03

17 Dec '03

In the public discussions about "medical data bases" and "medical account numbers," the key issue is being missed. Namely, Why can't patients carry their _own_ medical records, and disclose what they wish to disclose to doctors and hospitals, as they see fit? Whether implemented in a high-tech version, as a "smart card," or a low-tech version, as a "dossier" (a file folder), the principle's the same. (I'll get to insurance companies in a moment.) There is little incentive (*) that I can imagine for any patient to deliberately lie on his records, as such lying usually harms himself by providing misleading information to someone who is trying to help him--I mention this because presumably one of the reasons hospitals and whatnot keep the records is fear that the records will be altered or not fully reported. Medical records appear to be a perfect example of Chaum's "selective disclosure of credentials," or even "credentials without identity." (* There is of course some incentive to lie or withold medical information if the patient deems it invasive of his privacy, or something that he does not want on records accessible to others. But in a _specific medical treatment_, for example, he gains little by denying that he had measles as a child, or that he has used IV drugs. Provided he can disclose this information without being added to a data base--e.g., by using selective disclosure of information (and not his name)--the incentives for lying are small, possibly negative.) Insurers would of course be worried about falsification of records. This can be handled in several ways. Digitally-signed statements from hospitals or test services could be required, depending on the policies of the insurers--the holder of the files, such as the patient, would be unable to fake or alter such records. Still, when one asks another party to make a "bet" about one's health, which is what insurance of course is, it's not surprising that they would want to see to independent verification of one's assertions. This is largely separable from the issue of disclosing to doctors and hospitals medical information. The comparison that is often made between credit records and medical records is flawed. Credit records are the items of data _from other people_, e.g., the persons one has borrowed from, the landlords one has rented from, etc. And with credit records, a person is often inclined to falsify or withold items (though this is also solved partly with digital signatures, though not perfectly). (There are some interesting links with object-oriented programming, with patient-objects able to maintain their own state. Not true of creditee-objects, who are not the owners of the credit worthiness judgments of others.) This could be an area where actual progress can be made. While many people, and regulators, have concerns about untraceable digital cash, it is likely that the _public_ would find it hard to buy the argument that patients being responsible for their own medical records would be a dire threat to the Republic! Thus, while carrying one's own credit record is mostly unworkable, carrying one's own medical records is completely feasible, and solves many privacy problems. --Tim May (I hope I fixed any scrambled paragraphs...my Mac crashed again (it's been crashing several times a day, what with all the various semi-incompatible versions of the Mac OS, extensions, new programs, etc., I have) and I had to recover the text of what I'd been typing from one of those dreaded--but very useful--"keystroke capture" programs.) We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

4 3

Private Information Retrieval
by Ravi Pandya 17 Dec '03

17 Dec '03

This work looks like it might be of interest to readers of this list. Ravi --- On Tue, 24 Sep 1996 14:52:08 -0700 (PDT) Scott Dakins <sjdakins(a)cs.washington.edu> wrote: UNIVERSITY OF WASHINGTON Seattle, Washington 98195 Department of Computer Science and Engineering Box 352350 (206) 543-1695 COLLOQUIUM SPEAKER: Benny Chor, Technion, Haifa, Israel TITLE: Private Information Retrieval DATE: Wednesday, September 25, 1996 TIME: 3:30 pm PLACE: 422 Sieg Hall HOST: Richard Karp ABSTRACT: Publicly accessible databases are an indispensable resource for retrieving up to date information. But they also pose a significant risk to the privacy of the user, since a curious database operator can follow the user's queries and infer what the user is after. Indeed, in cases where the users' intentions are to be kept secret, users are often cautious about accessing the database. It can be shown that when accessing a single database, to completely guarantee the privacy of the user, the whole database should be downloaded , namely $n$ bits should be communicated (where $n$ is the number of bits in the database). In this work, we investigate whether by replicating the database, more efficient solutions to the private retrieval problem can be obtained. We describe schemes that enable a user to access $k$ replicated copies of a database ($k\geq 2$) and privately retrieve information stored in the database. This means that each individual database gets no information on the identity of the item retrieved by the user. These schemes use the replication to gain substantial saving. In the talk, I will describe the original work on this topic (joint work with Oded Goldreich, Eyal Kushilevitz, and Madhu Sudan), as well as recent developments in this area. Refreshments to follow. Email: talk-info(a)cs.washington.edu Info: http://www.cs.washington.edu ---------------End of Original Message-----------------

2 1

Re: WHO IS MAKING A MOCKERY OF WHOM?
by Jeremy Mineweaser 17 Dec '03

17 Dec '03

At 06:15 AM 9/24/96 -0700, Sandy Sandfort wrote: >C'punks, >Time for another informal poll. > >On Mon, 23 Sep 1996, John Anonymous MacDonald wrote: >> What a joy to make a public mockery of Tim Mayo! > >Do list members think Anonymous' posts make a public mockery of >Tim May or Anonymous? Let me know whose reputation you think >is enhanced or tarnished by these posts. I'll post a summary to >the list in a week or two. First, to answer your question, I think the posts tarnish the reputation of Anonymous, although there never was much reputation to begin with. I am of the opinion that a positive reputation is earned, not given, and arguing over the matter at hand certainly doesn't help build a positive reputation. Since these annoying posts started a week or so ago, I have (for the first time ever) begun killfiling people and messages on the cp list. Right now I am killing all messages from John Anonymous MacDonald, Dmitri Vulis, and any message in the "daily ... regarding TCM" thread(s). I hope this madness can end, so we can get back to more normal traffic levels on the list. If anything good can come of this, it's that more people (myself included) will begin to use filtering tools to improve the perceived S/N ratio of the list. I am working on making a Eudora Pro plugin that creates and maintains a reputation system, which can then be tailored to modify incoming mail as desired, removing irrelevant paragraphs, summarizing, all kinds of things. Initially it will just keep an index score for each user representing the quality of the content which they author, but I have lots of things I hope to add to it. Good luck with the survey, Jeremy --- Jeremy L. Mineweaser | GCS/E d->-- s:- a--- C++(+++)$ ULC++(++++)>$ P+>++$ gt4436c(a)prism.gatech.edu | L+>++ E-(---) W++ N+ !o-- K+>++ w+(++++) O- M-- | V-(--) PS+(--) PE++ Y++>$ PGP++>+++$ t+() 5 X+ R+() *ai*vr*vx*crypto* | tv(+) b++>+++ DI+(++) D+ G++ e>+++ h-() r-@ !y-

1 0

The daily word of caution regarding Timmy May
by nobody＠zifi.genetics.utah.edu 17 Dec '03

17 Dec '03

Timmy May studied yoga back-streching exercises for five years so he could blow himself (nobody else will).

1 0

Re: Portal remailer shutting down
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 7:03 PM 9/24/96, Hal wrote: >The ISP which I have used for over five years, portal.com, is going >out of business at the end of this month (September, 1996). This means >that my remailer at hfinney(a)shell.portal.com will cease operations. >I had asked that it be removed from the remailer lists a few weeks ago >due to some problems, so hopefully not many people have been using it >lately. But now it will go away for good. > >This remailer has been in operation since the fall of 1991. I believe it ^^^^^^^^^^^^ You obviously mean "fall of 1992." Anyway, congratulations on all of your work back then (in 1992 :-)), and for running it for so long. I, too, was a Portalite, from 1988-1992 (when I switched to Netcom, which offered a local POP (point of presence) in Santa Cruz). Portal was the first major ISP to offer accounts to non-academic users. They were also heavily used by those who'd signed up with "PC-Pursuit," a flat-rate phone service which made it feasible to dial-in to Portal from anywhere in the country. When the plug was pulled on PC-Pursuit, circa mid-89, the prospects for Portal dimmed as well. (My own usage dropped dramatically when PC-Pursuit was canned, as dialing-in to Portal directly was costing me $6-10 an hour, depending on the time of day. Once I got on with Netcom, in 1992, I was able to join various mailing lists, including the Extropians list and of course the Cypherpunks list.) I haven't been following the fortunes of Portal for a couple of years, but its relative absence from the playing field of Netcom, Best, Earthlink, etc. has been pretty noticeable. So I can't say I'm surprised it's going away. --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

The Netsurfer of Penzance
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Priority: normal Date: Tue, 24 Sep 1996 10:31:58 PST Reply-To: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> Sender: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> From: Eugene Volokh <VOLOKH(a)LAW.UCLA.EDU> Organization: UCLA School of Law Subject: The Netsurfer of Penzance To: CYBERIA-L(a)LISTSERV.AOL.COM ------- Forwarded Message Follows ------- From: "Thomas P. Vogl" <tvogl(a)wo.erim.org> The Newbie's Song (Based on the Major General's song from "The Pirates of Penzance", Gilbert & Sullivan). I am the very model of a Usenet individual, I've information meaningless and ultimately trivial, I know the basic elements of alien biology, And all the hidden secrets of the Church of Scientology, I've seen "The Wrath of Khan" and every Star Trek film that followed it, I moan about my Servicecard and how the cash till swallowed it, About the laws on handguns I am sending off a counterblast, With many cheerful facts about the way you can MAKE MONEY FAST! ALL: With many cheerful etc. I'll tell you why the Japanese are taking over Panama, And why the USA is still a better place than Canada, In short, in matters meaningless and ultimately trivial, I am the very model of a Usenet individual. ALL: In short, in matters meaningless and ultimately trivial, He is the very model of a Usenet individual. I post in alt.revisionism lies about the Holocaust, I cut my .sig to twenty lines, I didn't want to, I was forced, I really can't believe the "Good Times" virus to be mythical, And Clinton's raising taxes which is, frankly, bloody typical, I've upset several people on alt.flame, I really don't know how, And sent a thousand business cards to Mr. and Mrs. Shergold now, I have a very poor grip of political geography, And absolutely no involvement (yet!) in child pornography, ALL: And absolutely no, etc. I've paid two-fifty dollars for the Nieman-Marcus recipe, And told the Spanish tourist's tale about the toothbrush pessary, In short, in matters meaningless and ultimately trivial, I am the very model of a Usenet individual. ALL: In short, in matters meaningless and ultimately trivial, He is the very model of a Usenet individual. In fact, when I know what is meant by "binary" and "FTP", When I know how to decode porno JPEGs from a .uue, When I can handle HTML, Telnet, mail and IRC, And when I know the words initialized to form "http", When I have learnt what topics are acceptable in talk.bizarre, When I know more of Usenet than the tailpipe of a motor-car, In short, when I've a smattering of elementary netiquette, You'll say a better individual has never surfed the Net. ALL: You'll say a better individual, etc. For my technical experience, although I claim to know it all Could barely serve to run the installation disk from AOL; But still, in matters meaningless and ultimately trivial, I am the very model of a Usenet individual. ALL: But still, in matters meaningless and ultimately trivial, He is the very model of a Usenet individual. ----------------------------------------------------------------- Harry Erwin, Internet: herwin(a)gmu.edu, Web Page: http://osf1.gmu.edu/~herwin 49 year old PhD student in computational neuroscience ("how bats do it" 8) and lecturer for CS 211 (data structures and advanced C++) -- Eugene Volokh, UCLA Law --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "'Bart Bucks' are not legal tender." -- Punishment, 100 times on a chalkboard, for Bart Simpson The e$ Home Page: http://www.vmeng.com/rah/

1 0

Re: Bernstein hearing: The Press Release
by Greg Broiles 17 Dec '03

17 Dec '03

>And the ITARs are only executive orders, no? Not laws, right? I'm curious >as to why they're considered valid. Anyone know? They're administrative regulations. Legislative bodies (like Congress and state legislatures) can delegate some of their legislative authority to executive agencies (like the Forest Service or the State Dept) to make rules which have the force of law. This is done because legislatures don't have time to write all of the laws that bureaucrats think ought to be written - so the legislature says "Fine, write your own damn laws." Legislatures don't want to bother with deciding where you can build a fire on federal lands or exactly how close you can fly to an airport if you're not taking off or landing or what happens to undeliverable mail at the Post Office. So legislatures give some of their lawmaking power to the agencies that are in a position to see what needs to be regulated. The delegation of power is limited by superior law (e.g., statutes written by the legislature) and the regulatory duties of the agency (such that the Forest Service can't write regs for the FAA, etc.) and by the grant of power itself. This sounds like cops making up their own laws - and it is, but they have to act like legislatures when they do it. This means that they must (generally) publish proposed regs, accept comments, ignore them, and then publish final regulations. Agencies can't change the regs on a daily or a case-by-case basis, or change them without making the changes public. (But "public" means "buried somewhere in the Federal Register".) And that's what the ITAR is - a body of administrative law developed by the executive branch pursuant to a grant of power from Congress. (e.g., 22 USC 2778(a)(1), ". . . The President is authorized to designate those items which shall be considered as defense articles and defense services for the purposes of this section and to promulgate regulations for the import and export of such articles and services. The items so designated shall constitute the United States Munitions List.") It is subject to review by the courts just like the product of Congress itself; and an agency can't do something Congress can't do, like write an unconstitutional law. (Which is not to say that I agree with the inclusion of crypto on the list, or even the idea of "export controls", but I've seen the argument that "ITAR is not a real law so none of this matters" float across the list a few times and it's not realistic. Whether or not a given individual likes the idea of administrative rulemaking, it's clear that the courts and the government think that it's real, and will put people in jail for violating administrative regs.) -- Greg Broiles | "We pretend to be their friends, gbroiles(a)netbox.com | but they fuck with our heads." http://www.io.com/~gbroiles | |

5 4

Re: Public Schools
by Ross Wright 17 Dec '03

17 Dec '03

On Or About: 24 Sep 96 at 14:16, Dr.Dimitri Vulis KOTM wrote: > No, on the contrary, sending poor kids to good schools on scholarships > does not improve their genes. They tend to become drug dealers. > That just about does it for me. This jerk is just trying to push everyone's buttons. He is doing a beautiful job. Fuckhead. Ross

1 0

Lexis and Privacy - Bill approaches.
by Black Unicorn 17 Dec '03

17 Dec '03

Pressure from the FTC Which fielded hundreds of complaints about Lexis and the social security number scrap) has prompted members of the Banking Committee to add provisions to the most recent spending bills which protect personal information (including social security numbers, phone numbers, addresses, and so forth) under the Fair Credit Reporting Act. This limits access to this information to credit agencies and otherwise authorized entities. (Of which I assume Lexis is not one). It's not great protection, but it's something. I urge everyone to take their own measures to protect personal data regardless of what some piece of paper on a library shelf says is protected. The only real protection is not to allow release of the data in the first place. -- I hate lightning - finger for public key - Vote Monarchist unicorn(a)schloss.li

2 1

Re: We removed radikal 154 from xs4all :(
by James A. Donald 17 Dec '03

17 Dec '03

At 6:31 PM 9/23/96, tank wrote: >>Hi all, >> >>We have temporary removed radikal 154 from xs4all. >> >>We did this because the german ICTF and BAW continued to stop IP-traffic >>to and from xs4all. They not only blocked the web-server (with more than At 02:00 PM 9/23/96 -0700, Timothy C. May wrote: >Unfortunately, this means that Germany wins. No it does not: It means that I and presumably lots of other people just added radikal to their web sites. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

ISP Legal Fund
by William H. Geiger III 17 Dec '03

17 Dec '03

Hi, As it seems to be an almost daily event of hearing of a government authortity infringing on the liberty of Internet Users throughout the world I would like to present the following proposal: The establishment of an Internet Service Provider Legal Fund. All ISP world-wide would contribute to this fund. The resources of this fund would be used for the legal fees of ISP who whish to challenge government infringements of their users freedoms & liberties. Something like an ACLU for the Internet but on a Global scale. Any thoughts? -- ----------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting WebExplorer & Java Enhanced!!! Merlin Beta Test Site - WarpServer SMP Test Site Author of PGPMR2 - PGP Front End for MR/2 Ice Look for MR/2 Tips & Rexx Scripts Get Work Place Shell for Windows!! PGP & MR/2 the only way for secure e-mail. Finger whgiii(a)amaranth.com for PGP Key and other info -----------------------------------------------------------

1 0

Namibia, Marxists, and Peaceful Transitions
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:02 PM 9/24/96, stewarts(a)ix.netcom.com wrote: >People have been imposing their will on others in Ireland for 800 years, >and killing off the more prominent members of the opposition has been >a long-term policy of the thugs who've been doing it. Today there are >at least three competing gangs of thugs trying to impose their will on >others by force. The Protestants are afraid that the Catholic majority >on the island will enforce their rule on them, and the Catholics in the north >are afraid that the Protestants will enforce their rule on them, >both with good reason as near as I can tell. At least a few years ago, >the IRA were spouting Marxist rhetoric and wanted to impose their >Marxist thuggery on the whole island. The Queen's Empire's army ... Apropos of this (but not apropos of mathematical cryptography :-}), I read an amazing article, an uplifting article, a few years ago in the WSJ. The article was about Namibia, the country to the northwest of South Africa. Also known at times as "South-West Africa." (Being a Pynchon fan, Namibia and its Hereros had always had some interest to me.) South Africa was involved in a war/occupation situation with Namibia for many decades, with hit teams deployed to Windhoek to kill off opponents, etc. A bad situation all around. Some similarities with the situation in Northern Ireland. The leader of the opposition--which I think was called SWAPO, though that might have been Angola...anyway, some alphabet soup name like SWAPO--was a U.S.-trained college professor-type dyed-in-the-wool Marxist theoretician. He lived for years in Harlem and wrote articles about the coming Marxist paradise in Namibia. Rhetoric about driving out the parasites that prey upon the body of the people, seizing the means of production, yadda yadda yadda. All the usual Marxist stuff. Well, South Africa pulled out. Some sort of "peaceful transition" was arrived at, and the Marxists moved in. Except they almost immediately abandoned their Marxist rhetoric (which was approximately coincident with the collapse of Communism and the Berlin Wall, U.S.S.R., etc., so this may have had something to do with their loss of Marxist faith). The long and short of it is that the Namibian economy is doing well, relations with South Africa are good (also helped by changes in RSA's government one has to assume), the citizens are happy, AP-type killings have stopped, and both blacks and whites appear to be getting along fine. After reading the article, and seeing an interesting Namibian-made movie called "Dust Devil," I decided I would one day visit Namibidia as a tourist. (The article was a stunning one, the kind that the WSJ is able to sometimes do so well. I clipped it out, but have long since lost track of it. If anybody finds it in any online archives, I would appreciate getting a copy.) Whether Northern Ireland could be handled so felicitously is not clear, though I suspect the North could be absorbed into the Republic of Ireland easily and without "summary executions" of Protestants. Ireland--the Republic--is doing pretty well, has lots of high-tech plants (including a massive Intel chip factory near Limerick) and I think even the Northern Ireland Protestants would end up better off under Irish rule. (While many of us dislike the basic notion of "Irish rule," surely the nonlocal rule by a country across the Irish Sea is less appropriate than by the historical and geographic "landmass" of Ireland per se?) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Private Information Retrieval
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 8:54 PM 9/24/96 -0700, Lucky Green wrote: >On Tue, 24 Sep 1996, Ravi Pandya wrote: > >> ABSTRACT: >> >> Publicly accessible databases are an indispensable resource for retrieving >> up to date information. But they also pose a significant risk to the >> privacy of the user, since a curious database operator can follow the user's >> queries and infer what the user is after. > >Hmm. Sounds like job for KeyKOS :-) Yup. That was the original problem KeyKOS nee Gnosis was designed to solve. ------------------------------------------------------------------------- Bill Frantz | "Cave softly, cave safely, | Periwinkle -- Consulting (408)356-8506 | and cave with duct tape." | 16345 Englewood Ave. frantz(a)netcom.com | - Marianne Russo | Los Gatos, CA 95032, USA

1 0

Re: A daily word of caution in reference Tim C[unt] May
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Mon, 23 Sep 1996 01:50:01 -0400, Dustbin Freedom Remailer wrote: >Tim C[unt] May is not only as queer as a three dollar bill, but he is also into >having sex with children. Hi Dmitri!

1 0

Re: Taking crypto out of the U.S.
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Mon, 23 Sep 1996 21:25:33 -0500 (EST), Adam Shostack wrote: >Theres a personal use exemption. Michael Froomkin's web page has a >pointer to it. What if your laptop gets "stolen"? Or you sell it for a plane ticket home after your wallet gets pinched? >| Soon I am going to be going overseas to Japan, and I want to take >| my notebook with me so I can keep up with everything, however, I have >| encrypted my hard drive and usually encrypt my mail. Is this in violation >| of the ITAR to keep everything the same when I go over?

2 1

LACC: Encryption and Japan
by T Bruce Tober 17 Dec '03

17 Dec '03

A few months ago I read an article concerning one of the encryption gurus (other than PZ) setting up a company in Japan to create a new encryption program as good as or better than PGP which since it was developed in Japan, wouldn't be subject to ITAR. Actually I think the article indicated he'd already set up the company and developed the software and was getting ready to market it. I think it was Diffie, but can't remember and can't find any info on it. Does anyone here have any info, leads or contact details they can provide me? tbt -- | Bruce Tober - octobersdad(a)reporters.net - Birmingham, England | | pgp key ID 0x9E014CE9. For CV/Resume:http://pollux.com/authors/tober.htm | | For CV/Resume and Clips: http://nwsmait.intermarket.com/nmfwc/tbt.htm | | | | "Just as the strength of the Internet is chaos, so the strength of our | | liberty depends upon the chaos and cacophony of the unfettered speech the| | First Amendment protects." -- three wise federal judges |

1 0

Re: ISPs' information on users
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 8:18 PM 9/24/96, Robert Hettinga wrote: >--- begin forwarded text >> ------------------------------ >> Brave Old World: >> Reflections on Europe in the Digital Age >> by Steven Carlson; 20 Sep 1996 >> ------------------------------ >> >> ** So Much Fuss About A Bottle Of Ketchup >> >> Hungarian police recently sent a fax around to the local Internet >> service providers (ISPs) asking them to provide lists of their users >> in Esztergom, a small town outside of Budapest. It seems somebody >> had planted a bomb in a bottle of ketchup. Since everyone knows you >> can download bomb-making instructions from the Internet, the police >> figured they should investigate the local users. No, I'm not making >> this up. So, Hungary has GAK -- Government Access to Ketchup. Good to know the 57 Varieties are now considered munitions. On a more serious note, perhaps legal experts here could comment on something I've been wondering about. Could ISPs in the UlS. be compelled to report on the browsing and net surfing habits of their customer base? To make this clear, I don't mean in a specific criminal case, where the records are searchable under a warrant. I mean a blanket order that all ISPs compile and forward records. Were I an ISP, I would probably say, "Hell no! They're my records and the Fourth Amendment says my records are to be secure unless a proper court order is issued. Besides, my fee for generating each kilobyte of records is $100,000, nonnegotiable." (I think I've answered my own question, namely, ISPs would be under no obligation to report on customer activities, absent a proper warrant, and consistent with the ECPA.) However, ISPs are _not_ accorded the same status as priests, lawyers, and others with such privacy privileges (and obligations). Would it be legal for an ISP to offer for sale such records? Or to voluntarily go to the cops? (There's a certain new ISP with tight links to a quasi-religious group much in the news lately, and some have speculated that this ISP may be monitoring certain users....) --Tim May We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

5 4