December 2003 - cypherpunks-legacy

Re: Censorship through proxy
by Duncan Frissell 17 Dec '03

17 Dec '03

At 06:12 PM 8/6/96 -0700, Timothy C. May wrote: >Sing Sing (the country is now a prison, so...) is one of the states we >should think about targetting for "special attention." Not in the sense of >violence, but in the sense of offering help to freedom fighters, those who >want to use stego, web proxies, etc. I've been thinking of starting a "How to Defeat a Government page to pull together some of the anti-Sysadmin resources on the Net. "Your government -- just a rouge sysadmin." >I wonder what would happen if "Computers, Freedom, and Privacy '98" was >held in Sing Sing? It would be smaller going out than coming in. Singapore's retired president tried to get William Safire into town for a "debate" about whether he was still running the place via his son. Safire didn't take the bait. He joked about it in his column. DCF

2 1

Re[2]: SSNs (was Re: Internal Passports)
by Steve Coltrin 17 Dec '03

17 Dec '03

Simon Spero <ses(a)tipper.oit.unc.edu> wrote: >one silly thought: lots of people use cypherpunks as the username and >password for all those websites that want an id. What about a cypherpunks >3-2-4 number for those cases where an SSN isn't appropriate. Anyone know >what J. Edgar Hoover's SSN was? According to one of "George Hayduke"'s books, Richard Nixon's was 567-68-0515. -spc

1 0

Phone tapping in India
by Arun Mehta 17 Dec '03

17 Dec '03

"The Pioneer" headlined on August 6, 96: "CBI can tap at whim -- Agency has 6 bugging machines" (The CBI is effectively the Indian equivalent of the FBI) Apparently, these machines costing Rs. 7.5 million = $200,000 each, can each tap 7 phones in a 25-km radius, and were bought from a Hyderabad-based company, Fidelity Systems. Apparently, all that is needed to tap a phone is for the sleuths to dial the number through the machine, which then automatically starts and stops recording all conversations carried out with that number, as well the numbers dialled by the target. As it is, the law on wiretapping is draconian in India: on the occurrence of an emergency, or for "public safety", a designated government officer can direct that "any message or class of messages to or from any person or class of persons, or relating to any particular subject, brought for transmission by or transmitted or received by any telegraph, shall not be transmitted, or shall be intercepted or detained or shall be disclosed to the government." (This is from the Indian Telegraph Act of 1885(!), and applies to e-mail and BBSes as well). But with these new machines, even this designated officer can be bypassed. Under a box titled "Beware of blank calls", the newspaper mentions that when the sleuths ring your number to start tapping, you get a "blank" call (which one is quite used to here -- if that were enough evidence, the whole of India is being tapped!) What technology is this? If it indeed works this way, what is to prevent any large company or rich person from procuring the same hardware? Apparently, the purchase was authorised by former prime minister Rao, who is now complaining that his own phone is being tapped (serves him right). Arun Mehta Phone +91-11-6841172, 6849103 amehta(a)cpsr.org http://www.cerfnet.com/~amehta/ finger amehta(a)cerfnet.com for public key

2 1

****Developer Recants Hostile Java Applet Story 08/06/96
by reagle＠rpcp.mit.edu 17 Dec '03

17 Dec '03

SAN FRANCISCO, CALIFORNIA, U.S.A., 1996 AUG 6 (NB) -- By Patrick McKenna. Finjan Software of Israel, which earlier said its Java security software detected what the company called a publicly available hostile Java applet at a game site on the World Wide Web, has issued a statement changing its earlier claims. In the first story on the Java applet labeled "hostile" by Finjan, Newsbytes reported early Tuesday that the Java applet in question is part of a game available on the Web and connected to America Online. Shmulik Suhami, spokesperson for Finjan, told Newsbytes at the time, "We were contacted by one of our users who detected a hostile Java applet and we have confirmed the user's experience." Newsbytes reported Sun Microsystems' JavaSoft division reply as saying, "This issue is totally and completely bogus. Security features built into Java do not allow an applet to read or write to another computer without issuing a warning message and this applet in question is not a hostile Java applet. An individual at AT&T, acting independently of the company, developed the applet. We suspect a file for the applet was placed on a second system and that is probably why Finjan's software incorrectly read it as a hostile application. Actually, this is a flaw in Finjan's software. There is no bug or hostile application at all." In its early story, Newsbytes also quoted a JavaSoft spokesperson as saying, "What is going on is that the person's applet called an audio file from a second machine and Java's security features are so strong and restrictive that an exception is raised whenever a second machine is called. Finjan's software appears to have read the call to the second machine as a hostile bug." In recanting its initial claims, Finjan released the following statement: "We want to issue a clarification on the media alert we sent out yesterday describing a potentially suspicious Java applet. We were perhaps mistaken to describe the applet discovered as a 'hostile applet,' since we did not know if it did anything damaging to a person's system. The activity of applet described was harmless. We misunderstood the extent of the security exception based on information we received. Though in principal the way the app was created could constitute a risk, in practice this was a relatively harmless breech of security, which the Java Security Manager dealt with appropriately." (19960805/Press Contact: Mary Jo Wagner, Successful Marketing Strategists, tel 510-644-3837; E-mail Address: maryjo(a)successful.com; or Paul Karr, KVO, 415-961-1550)

1 0

RE: DoubleClick: Does is track browsing across multiple sites?
by Scott Marquardt 17 Dec '03

17 Dec '03

Yo, some bozo subsribed me to this thing. Who's the administrator? I want off (no offense; I'm sure it's an interesting forum, but I don't like being mail-bombed by way of forgery). Whoever administers this thing, I'd be glad of a copy of the headers on the message that subscribed me. Thanks -- Scott Marquardt

1 0

Mena
by jya＠pipeline.com 17 Dec '03

17 Dec '03

The Washington Post, August 7, 1996, p. A6. CIA Probed in Alleged Arms Shipments Reports Claim Agents Involved in Arkansas-Nicaragua Drug Swaps By Susan Schmidt The CIA's inspector general is investigating claims that U.S. intelligence agencies were involved in illegal arms shipments and drug smuggling at an isolated airstrip in Mena, Ark., during the years Bill Clinton was governor. A spokesman for the CIA said Inspector General Frederick P. Hitz is preparing a report on allegations that the CIA was involved in arms shipments from Mena to the Nicaraguan rebels during the 1980s, and that pilots hired by the agency brought back large shipments of cocaine. CIA spokesman Mark Mansfield said the inspector general will report on possible contacts between the agency and Arkansas state officials during the 1980s. His report also will deal with allegations that the CIA attempted to influence or curtail law enforcement investigations of Mena. Hitz was asked to investigate the Mena airport by CIA Director John M. Deutch, who was acting on a request from House Banking Committee Chairman Jim Leach (R-Iowa). Leach's panel is looking into the possible laundering of drug money generated at Mena. Leach's Banking Committee staff has been looking a variety of claims about Mena emanating from a collection of Arkansas law enforcement officials and various figures operating in the shadowy netherworld on contract with intelligence agencies. One congressional investigator likened sorting through the allegations to being trapped in "a hall of mirrors." Congressional sources said Leach made the request to the CIA about six months ago and expects a report from Hitz in late summer or early fall. The latest Mena claims are contained in "Boy Clinton," a book by American Spectator Editor R. Emmett Tyrrell published this week. In it, Tyrrell asserts that Clinton knew about CIA operations and cocaine smuggling at Mena. He cites as sources Arkansas state troopers, including one on the governor's security detail who says he was also a contract employee for the CIA during the mid-1980s and informed Clinton of what was going on at Mena. Clinton has said he had nothing to do with any activities at Mena. "Mena is the darkest backwater of the right wing conspiracy industry," said White House spokesman Mark Fabiani. "The allegations are as bizarre as they are false." [End]

2 1

Message
by Bovine Remailer 17 Dec '03

17 Dec '03

http://upside.master.com:8080/print/july96/ww9607.html w a s h i n g t o n w a t c h The Coming Internet Wars Michael C. Maibach There's a very real danger that for the first time both the PC and the Internet will be regulated and taxed. The PC industry policy landscape has never been so dynamic, as telecom deregulation and technology convergence take hold. Being on the cutting edge of technology places us at the leading edge of public policy. Here's what's coming. In Washington A group of U.S. long-distance resellers has petitioned the Federal Communications Commission to outlaw (yes, outlaw) Internet telephony software. Their view is that the unregulated Net should not compete with regulated carriers. The PC industry's position is that the FCC doesn't have the authority to outlaw this or any software. A much more significant threat is a possible RBOC petition asking the FCC to levy access charges on all "enhanced services," such as the Internet. They seem to object to ISPs moving data, e-mail, graphics and calls outside of the current "universal service" monopoly established by the 1934 Communications Act. The PC industry's number one telecom goal is competition in the local loop. Such competition should drive more bandwidth at a lower cost. Only the Net offers a modicum of competition to local service. If the FCC pulls the Net into the archaic telecom regulatory system, access charges could chill use of the most important telecom medium in the world. The FCC must also set advanced digital TV broadcast standards. As TVs move into the digital PC world, let's make sure that broadcast signals over public airwaves are both PC- and TV-compatible. And speaking of consumer electronics, digital videodiscs (DVDs), with 10 times the capacity of a CD-ROM and studio-quality output, are on the way. The motion picture and consumer electronics industries drafted legislation to protect content while enabling this new market. Unfortunately, their bill would inadvertently outlaw PCs as illegal copy devices! PC hardware and software makers have a vested interest in the success of DVD technology because it allows the copying of data and images. We, perhaps more than any other industry, want DVD technology to advance. But legal protections and private standards must make this a technology as open to PC users as it is to movie buffs. Finally, Washington is considering measures to strengthen copyright protection of material moved on the Internet, require closed captioning on PCs that pick up TV broadcast signals and forbid software exports that have strong encryption protections in the name of national security. An industry that has grown up with private standard-setting in an open, unregulated environment now faces the kind of intense regulatory pressures one is accustomed to seeing in the railroad or drug industries. This is spurred on by the convergence of FCC-regulated industries with PC markets, products and technologies. In State Capitals Action in many U.S. state capitals reflects themes developing in Washington. Long-distance resellers have asked state public utility commissions (PUCs) to outlaw Internet telephony software, for example. Florida and California are considering taxing "digital commerce" they fear may bypass state sales tax regimes. And a few RBOCs have actually petitioned state PUCs to allow increases in ISDN installation and usage fees. Members of the PC industry, working with consumer groups and Internet warriors, have successfully challenged such rate hikes. Lower ISDN prices and easier hookup should drive huge volume increases in this market, benefiting local phone companies and PC users. Around the World So far, activity abroad is less robust than in the U.S., but it's just a matter of time. The European Union recently reclassified PCs with CD-ROM drives as "consumer electronics devices," tripling their import tariffs. Moreover, Europe is considering a "TV without borders" policy that would impose domestic content requirements on TV programming. Since movies are a type of software, will proposals to limit the sale of "foreign" PC software follow? And governments in Europe, Canada and Australia are considering a "bit tax" on digital commerce. The old world of analog TV and telecom regulation must not spill over into the new world of competitive, open and digital markets. Governments must adopt the PC model of innovation and govern accordingly. In the U.S., the FCC must evolve into a Federal Competition Commission, and Congress should carefully guard digital commerce technologies that are changing the way we work, learn, consume and communicate. Michael C. Maibach is vice president for government affairs at Intel Corp. in Washington, D.C. ---------------------------------------------------------------------- Home | Upside Magazine | Entrepreneur Forum | Upside Locator | About Upside Comments and suggestions for this site are welcome via e-mail to: feedback(a)upside.com Copyright ©1996 Upside Publishing Company. All rights reserved. Powered by Thunderstone.

1 0

RE: Internal Passports
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

I've seen the same problem in a department store in Ottawa. They would not accept a Canadian Passport as identification for payment by cheque but would accept various credit cards and similar devices. My conclusion was that they wanted something that would show my friend's credit worthiness, not prove his identity. James Declan McCullagh <declan(a)eff.org> >I had the same problems when I was working at Xerox in Webster, NY. >Supermarkets just plain didn't want to accept my passport as valid ID. >> At 15:48 8/4/96, Bill Stewart wrote: >> >> A US passport is not considered valid ID by the State of Oregon. If >> somebody here doesn't belive this, send someone who looks like he >> might be under 21 into any liquor store in Oregon with just an US >> passport.

1 0

Re: Cookies on Microsoft Explorer?
by David.K.Merriman＠toad.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: alano(a)teleport.com, cypherpunks(a)toad.com Date: Wed Aug 07 10:46:25 1996 > At 09:14 AM 8/6/96 -0700, David.K.Merriman.-.webmaster(a)cygnus.com, > wrote: > > >I have IE3 configured to ask me for permission to accept a cookie. Yes, > >some sites send (n!)+1 cookies during a session. If they send too many, > I > >personally move on to another site, after sending them email (!). > > If the site sends you *LOTS* of cookies with no expire date, then they > have > probibly compiled their Apache server with the mod_cookie module. The > cookies are only used by the log files and i am willing to bet that > most > people who have that option compiled in do not even read the logs. Whatever the conditions/causes for the cookiefest, I make it known to them that the volume of cookies gives me electronic diabetes, and move on. I suspect that there will eventually be enough people that dislike being force-fed cookies and complaining about it that such sites will either fold, or get a klew. Dave - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- PGP Email welcome and encouraged. Visit my web site at http://www.shellback.com/p/merriman for my PGP key and fingerprint "What is the sound of one hand clapping in a forest with no one there to hear it?" - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAi3uZ2MAAAEEALWQtxX77SZSaFls6cVbPp+fZS4MNyKK3ZFYQo0qWyj+0tMq YgRTPRJRaCQixo63RttknogfPp514qdVMZw5iPeOXmD+RxrmTTwlbGqA7QUiG1x5 LG2Zims5zk4U6/rt8hwLh0/8E4lIb9r5d31qc8L1A9Twk/cmN8VrTvyYOzAZAAUR tBg8bWVycmltYW5AYW1hb25saW5lLmNvbT60KURhdmlkIEsuIE1lcnJpbWFuIDxt ZXJyaW1hbkBtZXRyb25ldC5jb20+iQCVAwUQLqwCX5IDOImWiDcFAQHFfwP/Tm5v 3zoijU9oYmAO1WVsw4+HamN0HdBKkDxPtuGeCmxNuiDPsucVjqctMfbh1WzCfNEb NfZdg3YVdDNgsQqlu4k8XznrbQSoQm3t5ySQNKvQx0KisJnee0caVpEgQ4bwSfuv 81TG08lJt4A0fIpXSllMnRkXenvXIBmgJTUklaiJAJUDBRAupxG0qWOYkEirxV0B AUUJBACJ0FYXTlR9ncd0tNnYGOGSLO1scgt8IxUDMyQ2htEsfSNxD6jg303LuAA/ Zset5p0JhACLLHbgtZlpYH4uQbjy9Ve9JrVm/6SysSnX1TfSNF5NoMcxGDYgNDRL tP/5jKRZ/hzH8vjHSWXnnN9Pb1MdYdWql4DjDQ+dIEm5sywbqIkAlQIFEC3uaE3F a078mDswGQEBbI8D/0FiwDcbfeNyDVJ+7EIWHjIxVkIGu+ArYUEllR3GSBHVZ9Vh 7n8bNXeNHMnG5cZ23TLMVvweyhxFS+cDi+I7omeDNr6x65z500LxfUvLK5bSuSiB VkTp2z+/iojY/662JwKHzEEunuJ4CO8Yhxy11CdeszEX7DpXzRxLL92rEmO2 =QZRc - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMggDg8VrTvyYOzAZAQE6cQP+JE18wLLTHDsmId+zFHh3Q5x7wA2oyS3/ 7FWxE5zWGipUxNT/tlRF/jdinMoLkg27Q7iQ1uoI4TDa5VE9pV6uGilCHN2naM0y A9Tvebxr/pHUj+hr0jYUCWzY6VQ2+q5icG11DHm3/iXhAF1SJHJJj2xi9zx4PRCv zINv8AXkFmg= =ps5w -----END PGP SIGNATURE-----

1 0

Re: The Solution: 20 Beautiful women
by David.K.Merriman＠toad.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: accessnt(a)ozemail.com.au, cypherpunks(a)toad.com Date: Wed Aug 07 10:46:46 1996 > I pat myself on the head. I am extremely brilliant. > Modest, too :-) > She who is most luscious > ___ > Mark Neely - accessnt(a)ozemail.com.au > Lawyer, Internet Consultant, Professional Cynic > Author: Australian Beginner's Guide to the Internet (2nd Ed.) > Australian Business Guide to the Internet > Internet Guide for Teachers, Students & Parents > WWW: http://www.ozemail.com.au/~accessnt > > Dave Merriman "I am not conceited. Conceit is a downfall, and I have none." - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- PGP Email welcome and encouraged. Visit my web site at http://www.shellback.com/p/merriman for my PGP key and fingerprint "What is the sound of one hand clapping in a forest with no one there to hear it?" - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQCNAi3uZ2MAAAEEALWQtxX77SZSaFls6cVbPp+fZS4MNyKK3ZFYQo0qWyj+0tMq YgRTPRJRaCQixo63RttknogfPp514qdVMZw5iPeOXmD+RxrmTTwlbGqA7QUiG1x5 LG2Zims5zk4U6/rt8hwLh0/8E4lIb9r5d31qc8L1A9Twk/cmN8VrTvyYOzAZAAUR tBg8bWVycmltYW5AYW1hb25saW5lLmNvbT60KURhdmlkIEsuIE1lcnJpbWFuIDxt ZXJyaW1hbkBtZXRyb25ldC5jb20+iQCVAwUQLqwCX5IDOImWiDcFAQHFfwP/Tm5v 3zoijU9oYmAO1WVsw4+HamN0HdBKkDxPtuGeCmxNuiDPsucVjqctMfbh1WzCfNEb NfZdg3YVdDNgsQqlu4k8XznrbQSoQm3t5ySQNKvQx0KisJnee0caVpEgQ4bwSfuv 81TG08lJt4A0fIpXSllMnRkXenvXIBmgJTUklaiJAJUDBRAupxG0qWOYkEirxV0B AUUJBACJ0FYXTlR9ncd0tNnYGOGSLO1scgt8IxUDMyQ2htEsfSNxD6jg303LuAA/ Zset5p0JhACLLHbgtZlpYH4uQbjy9Ve9JrVm/6SysSnX1TfSNF5NoMcxGDYgNDRL tP/5jKRZ/hzH8vjHSWXnnN9Pb1MdYdWql4DjDQ+dIEm5sywbqIkAlQIFEC3uaE3F a078mDswGQEBbI8D/0FiwDcbfeNyDVJ+7EIWHjIxVkIGu+ArYUEllR3GSBHVZ9Vh 7n8bNXeNHMnG5cZ23TLMVvweyhxFS+cDi+I7omeDNr6x65z500LxfUvLK5bSuSiB VkTp2z+/iojY/662JwKHzEEunuJ4CO8Yhxy11CdeszEX7DpXzRxLL92rEmO2 =QZRc - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMggDmMVrTvyYOzAZAQFIRgP/daZBRoJrHSGHFgUR3s5ofjrhF49yp3Wh OxyhrjZ1oPFCz1n7Nzii18JXFlaCCRzppgBYcr6/t777bhHVs3PeLpQNHW5q4xLD U+mOo9J0UF1TMVcAiYD9b4wVlLlcU+qa0PVYcuRLw3QbWd3g7eqABKpwKWyWibI4 CVUttLIzwX4= =yCpo -----END PGP SIGNATURE-----

1 0

cookie monster
by kickboxer 17 Dec '03

17 Dec '03

Does anybody have any information on the "Cookie Monster" technology that Netscape and Microsoft are soon going to incorperate in their internet browsers? All I know is that they take cookies and "eat" (destroy) them.

1 0

New domains, Internic, etcetera
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

Given previous discussion on here about Internic and their policies, the below URLs may be of interest: http://www.iiia.org/lists/newdom/ ftp://ietf.cnri.reston.va.us/internet-drafts/draft-postel-iana-itld-admin-01.txt The former is the list archive for a list discussing getting more internet domains & equivalents of Internic. -Allen

1 0

Oregen Vehicle Database on the Net
by jfricker＠vertexgroup.com 17 Dec '03

17 Dec '03

Aaron Nabil has purchased the entire Oregen Vehicle Registration database ($220) and put it on the Web. Did some oregonian piss you off on the highway? snail flame their arse! http://www.spiritone.com/cgi-bin/plates

1 0

Re: Apple people on the li
by Vinnie Moscaritolo 17 Dec '03

17 Dec '03

At 11:15 PM 8/6/96 GMT, John Young wrote: >I'd like to hear Tim, too, in this Big Apple. RealAudio, perhaps. >What would you offer to set off Tim's simmering crypto-anarcho-volcano, >make it heard round the planet? I can't offer much that would satify Tim's needs, he would have to look elsewhere for that (I will restrain my comment about a size 12 boot) The Mac crtpyo workshop http://webstuff.apple.com/~opentpt/crypto.html is just that, a workshop: a guerilla effort focused at Mac developers who write code to start including crypto in thier code. I am also sponsering an effort among developers to do keychain management on the Mac, In a manner similar to the popular Internet Config. Developers get together, talk, hack, and go home with plans to write stuff. What I offer developers is much more important to me right now. people complain about email apps not having built in crypto, I am trying to do something about it. So are folks like Olivier Merenne who does SafeMail http://www.highware.com/highware/safemail/safemail.htm . these are the kinds of people that I want to help. The workshop us not a forum for the very people that Tim complains about, to rant about how great the Mac is or isnt. or why crypto is good or bad, I will leave that to the wired.coms and other non-tech forums out there. I agree with Tim, If you really want to hear tim talk, you cant ead his rants on cp or I have a better idea, maybe you can send him some bucks and he'll send you a cassette tape or something (I would suggest he makes a quicktime movie and put it on your webpage or do a webcast, but that requires you buy into the Apple world doesnt it, so maybe you can do the windoze equiv) nuff said, cp Vinnie Moscaritolo Apple Developer Tech Support http://www.vmeng.com/vinnie/ Fingerprint: 4FA3298150E404F2782501876EA2146A

1 0

Re: Anonymous Remailers at work
by peter.allan＠aeat.co.uk 17 Dec '03

17 Dec '03

> Date: Tue, 06 Aug 1996 21:05:24 -0700 > To: cypherpunks(a)toad.com > From: Bill Stewart <stewarts(a)ix.netcom.com> > Subject: Anonymous Remailers at work > I've recently run into a couple of business problems at work > that could be solved by (slightly modified) remailers. > 1) Manager performance review, suggestion boxes, and questions to > visiting honchos - there are several departments that are using > "email to the secretary who'll take your name off and forward it" > to handle this problem. Remailers are an obvious solution. > It would probably be worth modifying the remailer to use a permit-list > as well as a block-list for destinations and maybe sources, > Any other reasons to install anonymous remailers at work, > and things you'd do to make them more attractive or > less scary to corporate network administrative types? I have a very crude + simple remailer using shell scripts. There is re-ordering and a standard message size. There is no scope for receipts or replies. I limit messages to 1kb to make it harder to send images. (There was once a management complaint about images- nothing to do with me or the remailer which hadn't started then.) It can only send and receive mail INSIDE the company. I have not advertised it widely, for fear of a management veto. It carries a warning to be sensible, and I'd be able to read the mail log following complaints. There is a short banned list, intended only to stop looping. In another message Bill said: > immigrant Brits and ... speaking funny-soundin' English at you. Um, some of us really do speak English. To the point where we struggle to make out Larry King and guest both mumbling away at high speed.

2 1

Re: Censorship through proxy
by Arun Mehta 17 Dec '03

17 Dec '03

At 18:12 06/08/96 -0700, Timothy C. May wrote: >At 4:23 PM 8/6/96, Joel McNamara wrote: >>http://www.singnet.com.sg/cache/sbareg.html > >Sing Sing (the country is now a prison, so...) is one of the states we >should think about targetting for "special attention." Yes, that would be great, and a trial run for the Big Prize, China. At the site mentioned above, they have a form to fill out, which only people from Singapore are supposed to respond to, which asks a lot of questions, including how much censorship users consider appropriate! If there is some way of making them think the response is coming from within Singapore when actually it isn't, maybe we could flood them with responses saying we want no censorship? Arun Mehta Phone +91-11-6841172, 6849103 amehta(a)cpsr.org http://www.cerfnet.com/~amehta/ finger amehta(a)cerfnet.com for public key

1 0

Re: e$: Watching the MacRubble Bounce
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 5:15 PM 8/7/96, Vinnie Moscaritolo wrote: >Man, > you guys have way, WAY to much time on your hands. CP is starting to sound >more like a bunch of bickering old ladies than the usual bickering group of >old ladies (uh I mean crytpo anarchists) . I would have responded and put a >round through the head of this discussion a few days ago, but my digest >feed to cp died a few days ago. "Put a round through the head of this discussion"? One of the most common conceits on this list is summarized by this comment: "I've said what I want to say, so now it's time for us to move on to other things." Or the charming equivalent: "You've heard my views, now can't we move on to some _real_ cryptography?" And then there's the old chestnut of claiming others have too much time on their hands. Learn to use the "delete" key for discussions you don't like. --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Licensed Ontologist | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

STEGO GUNS
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, The following is from USA Today of last Friday: In a comprehensive study that may reshape the gun control debate, researchers have found that letting people carry concealed guns appears to sharply reduce killings, rapes and other violent crimes. The nationwide study [from the University of Chicago] found that violent crime fell after states made it legal to carry concealed handguns: * Homicide, down 8.5%. * Rape, down 5%. * Aggravated assault, down 7%. ... The drop isn't primarily caused by people defending themselves with guns, says John Lott, the study's author. Rather, criminals seem to alter their behavior to avoid coming into contact with a person who might have a gun. The official release of the study is scheduled for tomorrow. The study took two years and was peer reviewed. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4 5

Re: Digital Telephony costs $2
by jim bell 17 Dec '03

17 Dec '03

At 11:00 PM 8/6/96 -0700, Bill Stewart wrote: >At 11:34 PM 8/5/96 -0800, you wrote: >>What is unclear, however, is WHY they "had to" build a card that couldn't do >>full-duplex. I mean, would there have been a problem implementing that? Or >>was this just another one of those stupid design decisions which could have >>been easily fixed if it had been realized in time? >2) DSPs tend to be really tight on resources, especially RAM, > which you need to do multiple programs at once. $5-10 DSPs are > especially tight. They're starting to come with mini operating systems. I wasn't aware that sound cards made appreciable use of DSP's. Unlike modems, which inherently must massage large amounts of signal to get the data, I assumed that sound cards were more like straight A/D/A systems. >>> It also has the advantage >>>that the data is being moved through your CPU, so encryption is >>>an easy add-on, rather than having one combined modem/voiceblaster >>>card which doesn't have any hooks for crypto or other processing. >>Well, I assume that if implemented as a new type of modem card, the >>processor can be used to do the data transfer. > >If you're doing the voice crunching and A/D conversion and telephony >all on the modem card, with everything tightly integrated >to fit in your tiny cache, why put in hooks for the processor to intervene? You'd put in a hook because it would be easily done, and to fail to do so would be a serious mistake. It could also be bypassed by a hardware switch, I suppose, or a software-controlled switch, to make processor intervention unnecessary. Jim Bell jimbell(a)pacifier.com

1 0

Re: e$: Watching the MacRubble Bounce
by Vinnie Moscaritolo 17 Dec '03

17 Dec '03

Man, you guys have way, WAY to much time on your hands. CP is starting to sound more like a bunch of bickering old ladies than the usual bickering group of old ladies (uh I mean crytpo anarchists) . I would have responded and put a round through the head of this discussion a few days ago, but my digest feed to cp died a few days ago. Since all this crap seems to center around a conversation between me and Tim , and really should have stayed that way, (Bob, consider this a rap on the nose with a rolled up newspaper) lets just clear up a few points nad then please move on to the next subject. By developer demand I am hosting a technical workshop for Mac Crypto developers <http://webstuff.apple.com/~opentpt/crypto.html> and asked Tim if he would like to speak, I though that since he has so much interesting stuff to say on the net that he might want to share it with some folks who write code for a living. Tim declined. no problem, normaly that would have ended it there, but Tim went on to state that I excluded him from the Mac Crypto list, I replied that I did no such thing and that I inherited the list (and hence any guilt I guess), He went on further deriding the Mac. I have been on the net long enough to no longer care about religious wars about "how long who's pull down menu was", BUT, I belive that Tim was a bit out of line with some of his comments about Mac Developers and Apple employees. I have a problem with that. We emailed a bit and came to the agreement that Tim would not be an appropriate speaker for a Mac technical workshop. fine, end of story,lets move on. But then Bob comes along and does his rant, the point was not so much to pick on Tim, which I belive he didnt name, but more to point out why the Mac is an important platform for crypto. Tim reacted and the pissing started. Lets just end it now. I am sure you all have better things to do. What I am concerned with is that in all the noise the following points are being lost in the fog of war. 1) there a a LOT of Mac clients on the Net. windoze might be popular in the corporate office, but Macs are still easier to configure (prove me wrong), and hence do have a place in this world. 1a) The Mac also has one of the best networking environment available for the desktop platform, OpenTransport IS very fast. And do me a favor dont complain about opendoc until youve tryed and write code with OLE. 2) Apple is nowhere near dead, anyone who says this is either smoking something harsh or lives in media painted world. The same people that say Macs are dead are the same uneducated liberal buttheads who write in the San Jose Merc Pravda about how a disarmed populus is a free(h)er one. 3) If you want strong crypto to get to the masses then you better start paying attention to genetic deversity or as I like to call it Watership Down syndrome, If you put all your crypto eggs in Bill's basket then don't complain when you find that the MicroSoft CAPI only supports escrowed keys. so lets all grow a little thicker skin and move on with it. while you all piss and moan, your rights are being stolen away, If you want to help crypto suceed then you have to care about Macs, just as much as windoze or Sun or Be or whatever platform. Back to work. Vinnie Moscaritolo ------------------ "friends come and friends go..but enemies accumulate." http://www.vmeng.com/vinnie/ Fingerprint: 4FA3298150E404F2782501876EA2146A

6 6

F2 hash?
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

Does anyone have a descriptoin of the F2 hash? F2 is a secret hash from SecurityDynamics, and is used in their client software. (Its not the hash in the cards, but if anyone has a copy of that, it might be fun.) I'd be very interested in seeing source code in the public domain to try out a few hacks... Anyone? Anyone? Bueller? Bueller?

3 5

Re:Wee Beasties on Mars [NOISE]
by mccoy＠communities.com 17 Dec '03

17 Dec '03

> > schryver(a)radiks.net: > > > > NBC News at Sunrise has just announced the discovery of alien life on the > > > planet Mars. The lifeform that became extinct more than 2 billion years > > > ago was found as a fossil in a meteor that originated from mars and landed > > > on earth. The fossil found was a primitive germ life form. > > NASA is holding a news conference today to discuss the find. I must > admit I am curious as to how they determined the meteor's origin. > Most material in the solar system is similar in composition. Using the same methods that geologists use to determine whether or not certain meteorites are from the moon, by chemical composition. Material from within the solar system actually has varied composition mainly determined by the distance of the body from the Sun (there are various theories as to why this is, an intro cosmology book will describe them all in detail), the actual percentages of various elements and compounds can be used to make a reasonable guess as to whether or not a particular meteorite was knocked off of a planet or moon to which we have sent a probe. For example, it is possible to buy fragments of "moon rocks" which are not actually samples returned from Apollo missions (which are all owned by the U.S. government) but are from meteorites which match the exact chemical and physical composition of the returned lunar samples. Such determinations are a lot easier for planets/moons which do not have active vulcanism or other events which significantly mix up the composition of the planet. At the news conference given this afternoon the fact that the meteorite was Martian in origin was probably the least controversial. It seems that exobiology may no longer be a field without a subject :) If the results are confirmed what I think will end up being the most interesting fallout of this will be in the creationism/evolution debate. It seems that life may have been independantly generated at multiple locations, barring a "space seed" debate flaring up again, and the "impossible odds" argument has become pretty weak... jim

3 2

Re: Corporate e-mail policy
by James C. Sewell 17 Dec '03

17 Dec '03

At 01:05 PM 8/5/96 -0700, Timothy C. May wrote: >At 5:34 PM 8/5/96, James C. Sewell wrote: > >This comparison breaks down completely. The police are not involved, so the >language of "probable cause" is inappropriate. Then use the language "good reason as defined by the company's policy". >Imagine Alice operates a courier service and owns and operates several >delievery vehicles . Here your example breaks down. Email is not like the courier company's vehicle at all. Bob didn't create the truck, he didn't think of it at any time as his, and he is not intending to use it to deal with someone else on a personal level. A better example would be that a letter sent through that courier company that is from Bob. If he pays for it to be delivered then he should have the right to privacy. If, however, the service is offered free to all employees, or if the paper/envelope/time was from the company then we would have the same problem... is it business-related, thus open to the whims of the employer, or is it private and off-limits? The whole question comes down to this: Is a collection of words written from an employee to another individual property of the company when it was written, edited, and transmitted by company equipment. The problem? There's no agreement on the answer to this. >(If anyone suggests that landlords cannot barge into tenant's apartments, >this is a different situation. For one thing, there are usually terms and >conditions spelled out in a contract about when and under what >circumstances a landlord may enter the premises.) There are often terms and conditions spelled out in employment contracts as well. I have had such contracts in every job I have held. They all went to the point of saying, in essence, anything I create on company time/equipment belongs to the company. >> Just remember, as was said, once you make a policy it becomes precedence >>and will stick with you forever... longer if it's a bad one. >> > >Alice the Courier Service is of course perfectly free to announce new >policies, so your point is incorrect. Granting that I meant precedent rather than prescedence I submit the following: precedent - n 1a. An act or instance used as an example in dealing with subsequent similar cases. 2. Custom or convention. They may change their policy at will, but the fact is that the decisions made today will "taint" or "shape" (depending on your point of view) the policies made tomorrow. Jim Sewell - jims(a)tansoft.com Tantalus Incorporated - Key West, FL

1 0

G7 Threat Alert from international Net-coalition (8/7/96)
by declan＠well.com 17 Dec '03

17 Dec '03

Date: Wed, 7 Aug 1996 12:27:21 -0500 To: fight-censorship(a)vorlon.mit.edu From: declan(a)well.com (Declan McCullagh) Subject: G7 Threat Alert from international Net-coalition (8/7/96) Sender: owner-fight-censorship(a)vorlon.mit.edu [Redistribute widely. Add'l info at http://www.eff.org/~declan/global/ --Declan] ====================================================================== ALERT FROM A COALITION OF ONLINE CIVIL LIBERTIES ORGANISATIONS G7 THREAT TO ONLINE FREE SPEECH AND PRIVACY IN THE NAME OF COMBATING TERRORISM THE G7 IS PLANNING TO CURB THE FREE SPEECH RIGHTS AND PRIVACY OF INTERNET USERS 7 AUGUST 1996 PLEASE REDISTRIBUTE THIS DOCUMENT WIDELY WITH THIS BANNER INTACT REDISTRIBUTE ONLY IN APPROPRIATE PLACES & ONLY UNTIL 30 SEPTEMBER 96 ______________________________________________________________________ IN THIS ALERT: Summary Background What You Can Do Where Can I Learn More? Organisations ______________________________________________________________________ SUMMARY On July 30th the G7 group of nations met in Paris to discuss terrorism. Among other responses the G7 have endorsed a number of restrictions and controls on the Internet. These include the prohibition or censorship of sources that may contain "dangerous" information, restrictions on the electronic speech of unpopular political organisations, and the imposition of "key escrow" or other means of allowing governments to violate privately encrypted correspondence. This particularly serious threat, which originates from recent events such as a bombing at the Atlanta Olympics and the crash of TWA Flight 800, is another case in a long list of attempts to restrict freedom of speech in electronic networks, of which there are alarming examples in many countries including Australia, Belgium, China, France, Germany, Saudi Arabia, Singapore, the USA and Vietnam, under a variety of pretexts ranging from "pornography" to "terrorism" and incorrect political opinion. * The "offensive" material being targeted is no different from similar material available in libraries and bookshops. *What is legal offline must also be legal online*. If material cannot be censored at the newsstand or the university library, it must not be censored in the online newsstands and libraries of our future. * Legislators and agency officials are pushing for speedy passage of censorious and privacy-harming laws, capitalising on fear of terrorism to exclude meaningful public input in the process and substance of these regulations. * Because the Internet is global, and every culture has its own rules about what is and is not permissible, the open nature of the Internet must be protected. No local jurisdiction should be allowed to impose its rules on the rest of the world. ______________________________________________________________________ BACKGROUND This alert is being issued by a coalition of online civil liberties organisations that support online privacy, freedom of speech and human rights. The organisations are listed at the end of this alert along with contact details. Since its inception the Internet has more than doubled in size every year. If this growth continues, more than one billion people will be using the Internet by the turn of the century. Each of these users can as easily publish material as they can read it. The Internet has the potential vastly to improve the workings of democratic government and to spread liberty across the globe. In light of recent bombings in the US and elsewhere, there are again calls to ban from the Internet information on explosives, as well as any other issues that can be related to "terrorism". Anti-terrorist hysteria has become the excuse for governmental attempts to circumvent online freedom of expression, guaranteed by constitutions, laws, and the UN Declaration of Human Rights. Information on how to make bombs, as well as other things that would be "banned", is widely available, often from the very governments pushing for censorship. Banning such publications from the Internet won't make it any less widely available. However it could become the tool for the censorship of any debate or opinion which happens to displease the authorities, or "pressure groups" that do not share those opinions. This is a pure and simple violation of free speech, no matter how it is disguised. Currently, communicating via the Internet is like sending messages on postcards. Anyone between the sender and receiver can read the message. Encryption (data scrambling) technology can be used to ensure the privacy of communications. It's like placing messages in envelopes. Although widely available the technology has not yet become a part of the Internet because of pressures from the "intelligence" and law enforcement agencies. Some countries, such as the United States, treat cryptography as if were a weapon, like missile or a machine gun, and ban its export. Other countries, such as France, have an outright ban on cryptography. Such policies threaten to undermine information infrastructure not only locally, but globally, leaving computer networks open to industrial espionage, and as we are seeing in recent news of electronic spying on the European Parliament, even governmental espionage, as well as criminal exploitation. What the G7 have called for is a way to read all messages sent by terrorists. The only way they can achieve this is to have some way of reading messages sent by anyone. What the G7 are demanding is that the privacy of all communications be compromised in the name of protection from terrorism. However, no real terrorist is going to use such a compromised system when uncrackable alternatives already exist and are freely available. Effectively G7 are demanding that we all compromise the privacy of our communications - for NO benefit. ______________________________________________________________________ WHAT YOU CAN DO 1. Be alert to what your government is doing or planning. Contact your law-makers and urge them to protect privacy and free speech on the Internet. Write to or call publications in your area and suggest that they report on any anti-freedom government action you hear about. 2. Join an online civil liberties organisation. See the end of this release for contact information for several such organisations. 3. If there isn't an online civil liberties organisation in your country, why not start one? Some suggestions on how to start an online civil liberties organisation are available at: http://pobox.com/~mbaker/creating.html and http://www.well.com/~jonl/bonfire.html ______________________________________________________________________ WHERE CAN I LEARN MORE? Further details on the G7 meeting and its effect on the Net can be found in a press release from the Global Internet Liberty Coalition: http://www.aclu.org/gilc/index1.html For a summary of efforts around the world to censor the Internet see the "10 May 96 Silencing the Net" report on the Human Rights Watch gopher site: gopher://gopher.igc.apc.org:5000/11/int/hrw/general For background on global efforts to muzzle the Net see these web sites: http://www.eff.org/~declan/global/ http://www.eff.org/~declan/fight-censorship/ http://www.io.org/~sherlock/doom/threat.html For information on global and international online freedom issues see the Electronic Frontier Foundation web site: http://www.eff.org/pub/Global/ Translations of this alert will be available as follows: Catalan: http://www.lander.es/~jlmartin/ French: pforsans(a)in-net.inba.fr Italian: http://www.nexus.it/alcei.html Spanish: http://www.lander.es/~jlmartin/ ________________________________________________________________________ ORGANISATIONS The following organisations have issued this alert: ALCEI - Electronic Frontiers Italy * http://www.nexus.it/alcei.html CITADEL - Electronic Frontier France * pforsans(a)in-net.inba.fr EFF-Austin (Texas) * http://www.eff-austin.org Electronic Frontier Foundation (USA) * http://www.eff.org Electronic Frontier Canada * http://www.efc.ca/ Electronic Frontier Ireland * http://www.efi.ie/ Electronic Frontiers Australia * http://www.efa.org.au Elektronisk Forpost Norge (Electronic Frontier Norway) * http://www.sn.no/~efn Fronteras Electronicas Espan~a (Electronic Frontiers Spain) * http://www.lander.es/~jlmartin/ HotWired * http://www.hotwired.com/ Human Rights Watch * http://www.hrw.org Reporters sans frontieres * http://www.calvacom.fr/rsf/ Press Contacts: Please choose an organisation above and visit their web site for contact information. ________________________________________________________________________ End Alert ========================================================================

1 0

RE: Internal Passports
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

---------- From: John Deters <jad(a)dsddhc.com> Sent: Wednesday, August 07, 1996 3:35 PM To: James Bugden Subject: RE: Internal Passports At 11:39 AM 8/7/96 EST, jbudgen(a)alis.com wrote: > >I've seen the same problem in a department store in Ottawa. They would not >accept a Canadian Passport as identification for payment by cheque but would >accept various credit cards and similar devices. > >My conclusion was that they wanted something that would show my friend's credit >worthiness, not prove his identity. John Deters <jad(a)dsddhc.com> wrote: >On the whole, though, I have been finding that people ascribe all sorts of >paranoid evils to all sorts of organizations, when the ultimate truth >usually starts out more like a Dilbert cartoon. Internally, I can usually >spot the truly evil corporate deception practices. Externally, though, >people can only make guesses based on actions that they've become party to. >And who can blame someone for that? In the case cited above, I confirmed with the store's credit department that a Canadian passport was not considered a valid piece of ID. I suggested that this was due to credit concerns but they denied this. For obvious reasons, I did not believe them. My opinion is that a rule that stated "two pieces of ID that showed credit worthiness" was either too complicated or too unpalatable to use. Instead, the rule is "two pieces of ID" with the definition of ID tacitly restricted to items that indicate credit status. Either that, or Canadian passports are too easy to get forged in Ottawa. This "keep it simple stupid" approach showed itself this week when I attempted to order replacement cheques from my bank over the phone. I was told that they needed my signature, but a signed fax request would be sufficient. I remarked that it was trivial to apply a forged signature to a fax. The response from the person was - wait for it - that I would then have to come in and sign for it in person. It was impossible to convince them that this was not just a problem with my fax machine, but a problem in general. Eventually, I typed up a fax request in Word, pasted in my previously scanned signature, and sent this to the bank. This made them happy, but I might be changing banks soon. In the physical world, a big lock or a steel door can indicate good security. Most people can evaluate the strength of this type of security fairly well. Until we have good analogies for the equivalent types of digital security, we will continue to face real problems. James

1 0