December 2003 - cypherpunks-legacy

Mitnick Rings Bell
by John Young 17 Dec '03

17 Dec '03

6 November 1997, Digital Cellular Report: U.S. government takes hard line on Mitnick. US Hacker Pleads for Help A US 'hacker'- Kevin David Mitnick - has issued a plea for financial help to fight his defence case through his lawyer, Donald C Randolph of Santa Monica, USA. Through Randolph, Mitnick is claiming that the US government is seeking to make an example of him for the possession of unauthorised cellular access codes. The issue is particularly important in the North American market where analogue, rather than digital cellular, is the norm. In one of the most amazing claims, Mitnick claims to have been kept in solitary confinement for 23 hours a day, naked in a freezing air-conditioned cell for eight months and led to the showers in chains. Perhaps the most puzzling aspect to the whole case is the fact that while the US government has never sought to prove that Mitnick profited from his 'hacking' activities - although he could certainly have done so by 'selling' stolen airtime to third parties. Instead they claim he caused losses in excess of $80 million. Kevin certainly appears to be paying the price for his nefarious deeds having already spent nearly two years in custody during which time he has been prohibited from any access to wireless communications equipment, computer hardware or computer software. It's difficult to know exactly which side is the more paranoid since Mitnick is claiming that his fate is part of a deliberate US government plot to divert scrutiny away from its plans concerning the control and regulation of both telecommunications and the Internet. The case would seem to present a most powerful argument for the US to switch more swiftly over to digital cellular where 'hacking' is far more difficult.

3 2

Re: church of crypto anarchy (Re: Taxing Churches for their views? Bad idea. (fwd)) (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 6 Nov 1997 08:52:15 GMT > From: Adam Back <aba(a)dcs.ex.ac.uk> > Subject: Re: church of crypto anarchy (Re: Taxing Churches for their views? Bad idea. (fwd)) (fwd) > Jim Choate <ravage(a)ssz.com> writes: > > Adam Back <aba(a)dcs.ex.ac.uk> > > > Seems to me that the distinction that churches are exempt from taxes > > > partly hinges on their non-profit, or not-for-profit status. > > > > No, it stems from the fundamental democratic axiom of seperation of church > > and state. If the churches pay taxes they aren't seperate. > > I pay taxes, I am separated from the state. Do you hold US citizenship? If so then, no, your assertion of seperation from the state is incorrect. It's that pesky "We the people..." thing. If you want to be considered seperate from the US *AND* you don't want to pay US taxes then renounce your US citizenship and move to another country *OR* figure out a way to become your own 1 person church. Like it or not that's the way it works. > > If the state supports churches they aren't seperate. > > If the state doesn't tax churches they are subsidizing them relative > to other sorts of organisations. This is surely a form of support. Subsidize means to pay, the government does not pay as a rule pay the churches anything, that would violate the seperation clause as well. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

WINDOWS *.PWL program
by �ukasz Bromirski 17 Dec '03

17 Dec '03

Two years ago, you've posted an Windows 95 *.PWL cracking program. However, it was severly broken in our news group. Could you post me personally a full-working copy of it (as an e-mail) or a source (full) of this program? I'll be glad to see it. Thanx in advance. -- ### ### ### ### ## ###### £ukasz Bromirski # # # # # # # # ## # #### e-mail: szopen(a)gazeta.pl # # # # # # # ### # ## tel. (+48) 022 699 48 00 # #### # ### # # # ## # #### Agora-Gazeta Sp. z o.o. ###### ####### ### ## ###### Dzia³ Telekomunikacji

1 0

Clarifying the Language
by Mixmaster 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- TruthPastor wrote: >Jim Burnes wrote: >> On Wed, 5 Nov 1997, Anonymous wrote: >> > Churches, like governments, corporations, or any other organized >> > entity, have some wonderful people in them, doing wonderful things. >> > The problem, as always, is what our founding fathers realized--these >> > types of organizations/structures tend to grow and attain power which >> > is then used for the purpose of self-sustained growth (survival). >> > Humanity tends to evolve, while organized humanity tends to de-volve. >> > Biped humans, walking upright, form organizations which move toward >> > becoming quadrapeds dragging large clubs. > >> Ha! This is pretty interesting. Rather than the typical cypherpunk >> approach of eliminating such inefficient and corrupting methods as >> income taxation and tax exemption we are playing by their game. Pathetic, isn't it? > Taxation and exemptions are, conceptually, no different than a >tribal agreement that those who bring home the deer will share >with those who guard the campsite, and that the shaman who keeps >the evil spirits at bay has to do neither. The important word in this sentence is "agreement". If the American taxpayer does not agree with how his tax money is being used, does he not have the right to demand that it be used in an appropriate way? If his demands go unanswered, does he not have the right to refuse to continue paying? If the American taxpayer does not like substandard education, abortion, weapons manufacturing, destructive environmental legislation, and so forth, why should she be forced to pay for it? The simple fact is that taxation in America has ceased to be an agreement, and has devolved into extortion with the threat of jail/forfeiture for "non-compliance". >> The whole of [Orwell's] warning to society was that by systematically >> altering the language, you alter the things that can be discussed. > > I believe that half of the disagreements on the cypherpunks list, >and the vast majority of disagreements in the world in general, are >the result of disputes over semantics, rather than beliefs. If one were to break down the anti-Income Tax argument to its most basic level, it would be that the government does not have the right to extort money from its citizens to promote agendas which are destructive of the citizens' persons and property. Basic Common Sense (TM). Nerthus -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNGHX9uFWwZe05jcJAQGj8AgAhPmUFgdrB5Wf5TYARJs7BovxFd+irLSA DlSehEMQfzergb3hsl90rW+HFxlw01CueQrkZpCKlRoHUxeoj3vimgpXBJRwjFDE ky2qhCSlFcjXEtqB6IBvPkzqd7lUK/lpv7VQzgsUrz6kS97l566sQTSILzF10mN2 NUT2CawCaU+69ZzR+oNwe6V8Yf1CWygIDYKnOiSpwRYsB6AV0kZcb5RKIYfDnNe7 FFjLsbg6L7LhQvvHHcs8CRkzjwo70sDI6kLOdUJvWPhyzuf4laam8L+tguTxrA96 2TUsMuG6Hi3WJVcUkabkx8J4D6yy3Pqep/scSgaqvwAr6VFJBh+KLg== =32Dc -----END PGP SIGNATURE-----

1 0

CNN's "Ian Goddard Plot"
by freematt＠coil.com 17 Dec '03

17 Dec '03

From: Ian Goddard <igoddard(a)netkonnect.net> Subject: CNN's "Ian Goddard Plot" _________________________________________________ ( free to forward & copy nonprofit with attribute ) ------------------------------------------------- CNN's IAN GODDARD TWA 800 "PLOT" (c) 1997 Ian Williams Goddard I've tried to decisively extricate myself from my TWA 800 inquiry, but it seems that CNN and the gov't don't want me to go. CNN is spreading gross misinformation on television, indicating that I said my inquiry into TWA 800 was part of a "sham" and a "plot." That is FALSE!! I've always promoted what I believe, and now I believe promoting the Navy-missile theory was a big mistake! I believe that the evidence is not sufficient to blame the Navy and I wish to move away from that and all areas of conspiracy inquiry forever. But I never said my inquiries were a "plot" or a "sham." Christine Negroni with CNN contacted me a few days ago to ask about my change of direction, I did not contact her. CNN reports now suggest that I said my conspiracy inquiry was part of a "plot" (a secret scheme) to do damage to the government's reputation. That's 100% FALSE !! My only crime is honesty. I'm honest enough to admit, as I have for months, that my inquiry into TWA 800 was an effort to identify untruth in the government. I have a fact-based bias against government, I'm a libertarian. My webpage was entitled "Anti-Authoritarian Journal," identifying my bias up front, unlike most sources. Such up-front honesty is NOT a "plot," as CNN attempts to portray it. The fact is that anything that is labeled what it is up front is by definition NOT a plot. I'd say CNN has a bias for the gov't line, however, does CNN label its journalism "Authoritarian Journalism?" No. WITNESSES NOT MY FAULT I did not invent nor am I to blame for the fact that 150+ witnesses reported having seen something fly upwards and explode at the spot TWA 800 was. That there were such wit- nesses, up to 154, has been widely reported in the media. CNN just reported in reference to me: Joe Lychner of Houston, who lost his wife and two daughters in the crash, told CNN that Goddard and Salinger owe an explana- tion to the American public. The basis of the missile theory are the witnesses, and I did not invent the witnesses. If anyone owes America an explanation for the missile theory I think it's the wit- nesses, not me. All I did was report what they said and commit the error of theorizing that maybe that fiery thing shooting up was a Navy missile and the Navy is covering it up. I also did not invent the Navy-missile theory. My explanation for that theory is that the Navy is known to have many missiles and is known to be off- shore where the plane crashed. However, an inventory showed that all Navy missiles were accounted for... OK fine, I'm ready to move on, but it seems they aren't: National Transportation and Safety Board spokesman Peter Goelz told CNN that my re-reporting of witness accounts and theorizing that the Navy was at fault has done "real damage" and "caused innumerable people great agony." Wow! It seems I'm a human monster of immense proportions. I am sorry for that, yet it would seem that the fault lies in part and primarily with the major media for ever having reported the witness accounts in the first place. I then made the mistake of suggesting that the Navy may have been at fault and is covering it up, which I now see as a mistake, for I could be wrong and if I'm wrong I've impugned the reputations of America's finest, which is something I should not and do not now want to do, and for which having done in the past, I am very sorry. I don't know what happened to TWA 800, and at this point I don't care! I just want to be left alone and no longer harassed by the major media and others over the TWA 800 case. I'm sorry I thought the Navy did it. It was a mistaken thought. I'm sorry my thoughts have "caused innumerable people great agony." I'm a humani- tarian and have been a vegetarian for 19 years because I want NOT to cause suffering to any living being. CNN's "SECRET SCHEME" THEORY I've never published anything I thought was false. I even published errata notices when required. All claims I've made were meticulously referenced so that readers could check up on what I said for themselves. Providing not just referenced information and ideas but all the links necessary to access the larger body of information about the case is what made my reports so popular and what made this little guy the focus of world news. My plan has been to end my "war on the Establishment." Wanting to move on from conspiracy theory and set a new course, I asked Doctor David Stern, who hosts the DEEP TIMES webpage, to remove my conspiracy reports. However, due to CNN's misleading charges that I've admitted to having been engaged in a "plot" and thus that I will- fully attempted to mislead people to believe what I knew to be false, I have requested that David Stern temporarily replace all my reports so that people can judge for themselves if I was the liar CNN suggests. It will take David some time to get the reports back up, but when they are up you can access them directly at: http://www.copi.com/articles/Goddard or indirectly at: http://www.copi.com/articles/. Please check the first site within the next few days. _____________________________________________ Ian Goddard, now at <igoddard(a)netkonnect.net> ************************************************************************** Subscribe to Freematt's Alerts: Pro-Individual Rights Issues Send a blank message to: freematt(a)coil.com with the words subscribe FA on the subject line. List is private and moderated (7-30 messages per week) Matthew Gaylor,1933 E. Dublin-Granville Rd.,#176, Columbus, OH 43229 Archived at http://www.reference.com/cgi-bin/pn/listarch?list=FA@coil.com **************************************************************************

1 0

Re: Privacy Software
by nobody＠neva.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Adam Back wrote: >Java isn't so bad. Just in time compilers are being shipped with >some browsers (netscape on some platforms). Sun now has native >bigint library (good for you know what, and exportable because they >haven't included the few lines required to implement public key >encryption with it). Okay, Java sounds pretty good. The native bigint library clinches it! >> While it may seem crazy to toss compatibility, it has some >> advantages. For instance, the only people who will use it are the >> hardcore types. I like the idea of an exclusive crypto system that >> only cool people who are fairly with it use. > >I think there would be advantages to always tunneling the encrypted >messages inside PGP, that way no snoops know you're using it, until >it's too late. Aside from political correctness issues, why not? It would also be nice to have an encrypted SMTP channel which happens to be riding on IPSEC. >> If the protocol doesn't accept multiple keys for a message it is >> slightly CAK/GAK resistent. And, it's a nice statement of intent. >> It's also nice to have tools which help you to behave securely >> without carefully thinking about it when you are using them. > >Forward secrecy is what you want for GAK resistance -- can't get much >more GAK hostile than burning your keys seconds after message >receipt. The more I think about the more the separation of authentication keys from communication keys seems like the way to go. If both parties can connect to each other's machines in real time, then a negotiated key which is discarded is great. More often everybody's offline, but that just means you have to publish many different communications keys, perhaps sorted by hours. (Given remailer lag you might have to keep communications keys around for a day or two after expiration, but that's not too bad.) >> The randseed.bin file has always bothered me. What we really want >> is some good sources of entropy in which we have tremendous >> confidence. > >What's wrong with the randseed.bin and the public and private key >rings is that they should all be encrypted with a key derived from >your passphrase. It's also complicated and hard to understand. The Right Thing (TM) is to simply solve the entropy problem correctly. >> >I wonder how good linux's /dev/urandom would be if MD5 becomes even >> >more suspect. >> >> Well, neither of these would be good for a one time pad, of course. > >Linux's /dev/random might not be bad. There is some real entropy in >key strokes and mouse movements, and they are quite conservative >about entropy estimation. You can easily make it more conservative >-- XOR together a load of it to derive a smaller key. The problem with computers generating entropy is that they are complicated machines which are designed to be deterministic. While it seems reasonable that keystrokes and mouse movements have some entropy, its hard to really convince yourself that there couldn't be patterns arising from the OS somehow. For example, maybe the sample times form weird patterns which are related to the scheduler. By all means this can be XORed in, but it seems dangerous to rely upon it if you are trying to be hardcore and use one time pads. >> It would be neat to have, say, three sources of hardware randomness >> and then XOR the result with the above pseudo random output. > >That'd be fine. Personally not being a hardware type, I am >suspicious of hardware RNGs.. I can't tell when they are going >wrong.. failure modes can be dangerous (whoops lead fell of geiger >tube), etc. Most plausible failure modes in hardware should be detectable with the usual tests for "randomness". >Software and computers are easier to understand. Provided you XOR >the lot together you should be fine though. Software and computers are highly complex devices and we don't truly understand every aspect of their operation. We can say it's unlikely that there are patterns in the bits they generate, but if we resorting to one time pads, it seems to me that the entropy question has to be nailed down completely. (Not that I have a good solution, yet. As you pointed out, one time pads consume a lot of entropy. It takes a long time to flip a coin 1.5 MB * 1024 bytes/MB * 8 bits/byte times!) Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.htm -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNGK7tpaWtjSmRH/5AQH1Rgf7BWVm8IsauXUry7vzL1Wiw/jlISKXO+q2 SWXOW0ce2jH1wKH+X3FbiONLYihzhp8UIvyn6FO7rVXHMdXoDXFVhrpyhbphcejM hokty69o1hQqLU9aX6z7OAA7Vjj2zKZXWc7U596UGkc0+G64qpJfh7kZoHY+Q332 uWMhEHu0AOnv9wGK9Fip4J4n/4jh/ob00VXXeTGG9peJ/AZBqtJMHV9tLW8Xu2EA Yc+zdUmk2jjSHvi2a/9u8NTsJapUVFiEaZ8+iQCZYeP8SG6oAsMmMb0rrCj1y+DK EtMt0rtC6jHGl8dag7zfZLpiIrl6mObMexbh5gAJ40Fb6Ei0HLbZ0g== =4BA0 -----END PGP SIGNATURE-----

1 0

Re: Protocols for Insurance to Maintain Privacy
by Anonymous 17 Dec '03

17 Dec '03

Two ways to tell if the person has had the test: A) The company performing the test keeps track of everyone who has had it. This could be by some biometric ID, perhaps even a DNA fingerprint. B) The company performing the test marks people who have had it. They could have a harmless radioactive tracer injected. This would degrade after a while but it could be used to see if the test had been taken within some time interval. Both of these require that all companies able to issue the test cooperate and that there is no black market source of testing.

2 1

[news] U.S. cyberterrorism report hit on encryption stance
by Vipul Ved Prakash 17 Dec '03

17 Dec '03

*** U.S. cyberterrorism report hit on encryption stance The U.S. commission on critical infrastructure was criticized Wednesday for endorsing the Clinton administration's policy requiring government access to all private computer data. Sen. Patrick Leahy said key questions had been raised about costs and feasibility of so-called key recovery systems. "Until those significant questions are ... answered, we should be cautious in adopting grand key recovery encryption schemes that may exacerbate system vulnerabilities," Leahy said. The commission's report warned key telephone, power, water and financial systems were increasingly vulnerable to computer attack. For story http://www.infobeat.com/stories/cgi/story.cgi?id=5804555-b01

1 0

No Subject
by Anonymous 17 Dec '03

17 Dec '03

I have your GAK. Mail me your CAK and we'll trade.

1 0

Re: Govt. key escrow justification
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Adam Back wrote: > This is scary stuff... Clipper VI (or whatever number we're up to) in > the making. Expect a fresh onslaught of government master key > attempts from the US government based on this info war initiative. > Michael Wilson <0005514706(a)MCIMAIL.COM> forwards: > > In its formal recommendations, the commission urged the government to > > speed up pilot programs on key recovery, promote efforts to plan for > > implementing large-scale key recovery systems and encourage > > private-sector key recovery efforts. > And there it is, they now want to encourage private sector key > recovery. Now why would they want to do that, if they don't plan to > use it as an infrastructure. > Building central control in _anything_ is asking for trouble > in info war terms. Everything should be as distributed as possible, > to minimise scope of an attacker who compromises keys. InfoWar goes on all the time amongst the Heavy Hitters in governement and commerce. It's called politics and money. Scenario I: Bill Gate$ reads an article where US Federal LEA's are bragging to insider politicians about their history of using their snooping and InfoWar capacities to financially disrupt 'bad' governments and corporations. Bill Gate$ then hands his company's secret keys over to the government because he trusts them to settle their dispute with him in court, instead of just 'grabbing' his money via his secret keys. Scenario II: Bill Gate$ gives his company's secret keys to Lucky Green, who runs toward the site of the Cypherpunks physical meeting, shouting, "Party time! Party time!" BillyG walks back to the limo, muttering, "That Lucky sure has a good sense of humor...I hope!" > Law enforcement with the master keys to the whole country is a huge > risk. Some law enforcement key custodian will simply be bribed or > coerced for the key, and then they really will have an info war risk. The only thing security levels do is determine the end cost of compromising security. Do you have to bribe/coerce a janitor or an executive? > > Asked by the subcommittee's chairman, Jon Kyl, an Arizona Republican, > > if those controls should be mandated, Marsh responded: "We think > > businessmen will find it in their best interest to incorporate these > > controls. ... Of course, in due time, that may be an option if they > > are not willing to accept them." Voluntary-Mandatory == Volmundatory ? GAK, GMR, ATP (Access to Toilet Plungers)...Cookies, Identity Tracking... What is going on is quite simply a battle for access to information. InoWar! Everybody wants access to the information of others, and to deny others access to their own information. Information is power, and power is kept by keeping the keys to that information. Corporations want to play footsie with the Government when it comes to getting access to all information and communications that pass through the self-defined borders of the Corporate Electromagnetic Curtain, but want to avoid being subject to total control within the borders of the Government's own self-defined ElectroMagnetic Curtain. The issues of power and control are the same as they have always been, but the Battle of the Bulge is now the Battle of the Byte. Government, Corporations, Organizations, Individuals...the players will be the same as in MeatSpace, and so will the issues and underlying concepts and ideals. Those seeking power and control will use the same tried-and-true methods, such as Divide and Conquer. "We don't want no 'nigger' data passing through our website. <---> We don't want no 'racist' data passing through our website." Chorus: <everybody sings together> "THERE OUGHT TO BE A LAW!" The Government wants to seize contol of ElectroMagnetic Reality by appointing themselves as our Electronic Protectors. Corporations are fighting to use the new technologies to protect themselves, cutting the Government out of the power loop. Individuals _should_ be trying to do the same. Government has declared Crypto munitions for the same reason they increasingly declare Guns to be 'government-munitions'. Those who have no power to protect themselves are vulnerable to those who have _reserved_ that power for themselves. Crypto or Guns...it's all about power and control of CyberSpace and MeatSpace. MunitionsMonger

1 0

BXA mtg in DC, 12/9/97
by Greg Broiles 17 Dec '03

17 Dec '03

In late September, I attended a meeting of the BXA's Regulations & Procedures Technical Advisory Committee in Portland (OR), where there was some discussion of crypto export control regulations, plans for changes to those regs, etc. There will be another meeting of that group on 12/9/97 at 9 AM in the (Herbert C., not J. Edgar) Hoover Building, Room 3884, between Pennsylvania & Constitution Avenues, NW, in Washington DC. The agenda is: 1. Opening remarks by the Chairperson. 2. Presentation of papers or comments by the public. 3. Update on the encryption regulation. 4. Update on the Wassenaar Arrangement implementation regulation. 5. Discussion on the "deemed export" issue. 6. Discussion on the Enhanced Proliferation Control Initiative and the continued publication of Entities of Concern. 7. Update on the Automated Export System. 8. Discussion on efforts to conform the Foreign Trade Statistics Regulations and the Export Administration Regulations on export clearance requirements. [Closed session] 9. Discussion of matters properly classified under Executive Order 19958, dealing with U.S. export control program and strategic criteria related thereto. -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | Export jobs, not crypto. http://www.io.com/~gbroiles | http://www.parrhesia.com

4 3

[Fwd: Re: [RePol] Donations Received]
by Six 17 Dec '03

17 Dec '03

This was sent through EFGA's Georgia Cracker Remailer, but seems to have gotten 'lost' in the remail. Go figure... To: remailer(a)anon.efga.org Subject: Re: [RePol] Donations Received From: TruthMonger <tm(a)dev.null> Date: Wed, 05 Nov 1997 22:24:00 -0600 Organization: "It's not FUD until *I* say it's FUD!" References: <3.0.3.32.19971105220233.03538154(a)rboc.net> Reply-To: tm(a)dev.null :: Anon-To: cypherpunks(a)toad.com Robert A. Costner wrote: > > This week Electronic Frontiers Georgia (EFGA) found donations in our > mailbox for the first time. I'd like to thank those of you who have sent > us your support. As you know, EFGA has no endowment or source of income. I was rather surprised when I received a plea for donations from these people via my subscription to a suicide survivors mailing list. Likewise when my 10 year old daughter mentioned receiving one through her 4H Club mailing list. Upon asking others at work, I found that these people have been sending their requests to millions of people, through every conceivable internet forum, and that quite a few of the recipients had been taken in, and sent them donations. In the interests of stopping this obvious scam, I have founded a group dedicated to wiping out this kind of fraud on the internet, starting with the scum at the EFGA. If you are interested in contributing to our effort, send donations to: Electronic Fraud Fighters (EFF) Box 281, Bienfait, Saskatchewan CANADA S0C 0M0 or email me at: TruthMistress <tm(a)dev.null> > If we raise $2,000 we will be getting a new > server. If we raise $900, we will be doing upgrades on the current machine. > The address again is > > Electronic Frontiers Georgia > Suite A-205 > 4780 Ashford Dunwoody Road > Atlanta, GA 30338 > > For membership info, http://www.efga.org/about/membership.html

1 0

FTC Making It's Move / FTC, Canada, Mexico officials launch "health claim surf day"
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Declan McCullagh wrote: > [From Nov 5 Natural Healthline. --Declan] > by Michael Evers > The Federal Trade Commission recently joined with public health and > consumer protection and information agencies from the United States, > Canada, and Mexico to "surf" the Internet for potentially false or > deceptive advertising claims concerning treatments or cures for heart > disease, cancer, AIDS, diabetes, arthritis, and multiple sclerosis. TruthMonger Terrestrial Translation: The FTC, fearing loss of its dictatorial powers over the information that citizens are allowed and not allowed to access, wants the citizens to do its legwork for them so that they can step forward to 'save' us all from people who use herbs instead of nuclear radiation to maintain their health. You remember the FTC, don't you? They are those wonderfolks who gave us the 'mainstream media' that used the citizen's airwaves to read us the spoon-fed government propaganda during the Gulf War. In other news: That pesky Sadaam Hussein is acting up again, as he always does during US elections. Funny how the Democrats always come out of wars with Sadaam looking bad, and CIA-backed Republicans always come out looking good. Note to Clinton: You're a Democrat. If you try to show-off in the Gulf, all of your helicopters are going to crash. TruthMonger

1 0

Re: [SURVEY try again] pgp5.x / pgp2.x users
by ulf＠fitug.de 17 Dec '03

17 Dec '03

20 % of the users who have posted digitally signed messages that are available in my news spool (international and local newsgroups and mailing lists) use PGP 5. The sample contains 545 unique e-mail addresses. YMMV. S/MIME Cryptographic Signature 10 Version: 2.3a 1 Version: 2.6.1 1 Version: 2.6.2 68 Version: 2.6.2, by FileCrypt 1.0 2 Version: 2.6.2i 5 Version: 2.6.3 4 Version: 2.6.3a 8 Version: 2.6.3i 37 Version: 2.6.3ia 278 Version: 2.6.3ig 1 Version: 2.6.3in 9 Version: 2.7.1 2 Version: 4.5 6 Version: Cryptix 2.2.2 2 Version: Cryptix 2.21 3 Version: Cryptix 2.3.0 1 Version: PGP 5.0i 1 Version: PGP for Business Security 5.5 12 Version: PGP for Personal Privacy 5.0 86 Version: PGPfreeware 5.0 Charset: noconv 1 Version: PGPfreeware 5.0i for non-commercial use 7

1 0

Ooops....!
by Dirko 17 Dec '03

17 Dec '03

That should have been cypherpunks-request(a)toad.com ... SH** sorry ... It's coffee buzz... *shake* ---------------------------------- Dirko van Schalkwyk Dead Engineers Society E-Mail: meddle(a)adept.co.za Date: 11/07/97 Time: 01:28:37 ----------------------- Movie Quotes for Willow (1988) ----------------------- Sorsha: What are you looking at? Madmartigan: Your leg. I'd like to break it. ------------- All of the following stolen from selected poeple mailing to the AfterStep mailing list ----------------------- Contrary to popular belief, Unix is user friendly.It just happens to be very selective about who it decides to make friends with. ----------------------- Windows95 (noun): 32 bit extensions and a graphical shell for a 16 bit patch to an 8 bit operating system originally coded for a 4 bit microprocessor, written by a 2 bit company, that can't stand 1 bit of competition

2 1

plugin to sell digital files in cyberspace announced!!
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

wow, I have been thinking that netscape/microsoft would put something like this in their browser and that this would kickstart the microcurrency market. however, it sounds like someone has preempted them for the moment and built a plugin. this is an extremely significant development imho. I don't know how credible they are (the notice was spam) but it's a step in the right direction, and the creation of a whole new market I predict. Date: Thu, 06 Nov 97 06:28:47 EST To: InternetUser(a)The.Net Subject: Turn your web-site into a pay-per-view site free in 10min! Reply-To: powerit(a)venus.t-1net.com I-vendor is offering a freeware version of a software plug-in that allows anyone to sell digital files such as photos, programs, text based information etc. from any web site. You don't have to be a company, you don't have to have credit card facilities, you don't have to do anything fancy with your web site - just convert your files, put them on your site and wait for the monthly checks. The software works with Window 3.x & 95 and current versions of Netscape and Internet Explorer - full instructions for use are provided. - - --- Visit http://members.aol.com/ivendor/index.htm to download the freeware plug-in and information pack. - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

Re: [Fwd: Re: [RePol] Donations Received]
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Six wrote: > This was sent through EFGA's Georgia Cracker Remailer, but seems to > have gotten 'lost' in the remail. > Go figure... Perhaps they objected to you not using your Government approved 'Prisoner of Citizenship' name.

1 0

new lanl patent?
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Authentication-Warning: blacklodge.c2.net: majordom set sender to owner-cryptography(a)c2.org using -f From: proff(a)iq.org Date: 6 Nov 1997 06:35:37 -0000 To: cryptography(a)c2.net Subject: new lanl patent? Sender: owner-cryptography(a)c2.net From: "Jongsma, Ken (NM75)" <ken.jongsma(a)das.honeywell.com> Date: 24 Oct 1997 10:32:24 -0600 Subject: Hiding In Plain Sight from the Oct 20 Aviation Week: "Researchers at Los ALimos National Laboratory have patented a new software technique that can hide secret information in the electronic "noise" associated with the transmission of data and electronic images. Called "data embedding," the method allows classified data to be stored and transferred in open transmissions and can serve as an "electronic watermark" to prevent unauthorized manipulation of digital images and other information, according to Ted Handel, project leader. The software can be used on a desktop personal computer and consumes only 512 kilobytes of memory, less than most word processing programs. It is written in "C" computer language which conforms to virtually any digital storage medium. Overall document length can remain the same." Aside from the obvious errors in the story, do you suppose that someone ought to clue the patent office in that steganography has existed for quite a while now? If anyone would like to research the patent and report back, it would be interesting to see what is so unique that the could get a patent on it. -- ken.jongsma(a)das.honeywell.com 505 828-5876 Voice 505 828-5500 Fax --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

2 1

Re: Hughes Markets? (Was Re: Copyright commerce and the street musician protocol)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Sender: hutchinson(a)click.ncri.com Mime-Version: 1.0 Date: Thu, 6 Nov 1997 14:52:30 -0500 To: Robert Hettinga <rah(a)shipwright.com> From: hutchinson(a)ncri.com (Art Hutchinson) Subject: Re: Hughes Markets? (Was Re: Copyright commerce and the street musician protocol) Cc: dcsb(a)ai.mit.edu Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: hutchinson(a)ncri.com (Art Hutchinson) Robert Hettinga wrote: >A whole bunch of people are now talking about these cash-settled recursive >auction processes, and they're a direct, and now obvious, consequence of >bearer (or at least instant) settlement markets for information on geodesic >networks. When you add anonymity to the transaction, you pretty much have >the final straw for "rights" tracking. Watermarks just tell you who the >information was stolen from, for instance. So, one more industrial >information process bites the dust. Whoa! Hang on here. Sure, watermarks will tell you who information was stolen from, but they're just a stalking horse... a weak second cousin to *persistent* content control technologies (such as IBM's Cryptolopes and Intertrust's Digiboxes). These allow rightsholders to manage a wide range of parameters (including price, usage context, and any other variable for which you can imagine having a certificate). Whats fundamentally different about what are generically referred to as secure envelopes, is that they can maintain controls *indefinitely* (persistence), across an un- known, ad hoc, web of distribution over which one otherwise has no control. And yes, this can all work even in a completely disconnected environment (laptop at 35,000 feet). They allow rightsholders, if they so choose, to *continue* being rights- holders in a highly networked, digital world, and in a wide range of new ways, based on entirely new (or old) business models, that take advantage of rich/elaborate conditions for usage (e.g. you can view this picture anonymously, but it will cost you 2X as much, and you can only get it at low resolution, and you can't view it at all unless you can prove that you don't live in the Middle East). No certificate for these conditions? Sorry, no content. They are based the same basic stuff (public key cryptography of course) that *can* fuel wild anarchic visions of anonymous exchange. ;) But they aren't at all deterministic of any particular economic model. Regards, - Art Art Hutchinson hutchinson(a)ncri.com Northeast Consulting Resources, Inc. phone: (617) 654-0635 One Liberty Square fax: (617) 654-0654 Boston, MA 02160 www.ncri.com ------------------------------------------------------------------------------ "Working at the intersection of business and IT strategy to help organizations embrace electronic commerce opportunities" For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

2 1

Jam Six
by Anonymous 17 Dec '03

17 Dec '03

Jam Six Six

1 0

FEMA site using cookies
by Attila T. Hun 17 Dec '03

17 Dec '03

1 0

plugin to sell digital files in cyberspace announced!! (fwd)
by Lindsay Haisley 17 Dec '03

17 Dec '03

>wow, I have been thinking that netscape/microsoft would put >something like this in their browser and that this would >kickstart the microcurrency market. however, it sounds like >someone has preempted them for the moment and >built a plugin. this is an extremely significant development >imho. I don't know how credible they are (the notice was >spam) but it's a step in the right direction, and the >creation of a whole new market I predict. I looked at their website and it looks rather fishy to me. Several issues and questions are obvious, not the least being the observation that this is an absolutely fabulous way to collect a bunch of credit card numbers. There is no information on the website to say where I-Vendor is located, or any way to judge whether it's even a legit company. The website is on AOL, so it's real ownership is effectivley concealed, and the owners could be over the border into Mexico with a hard drive full of stolen CC numbers and no one would be the wiser until it was too late :-( A legit domain name and website to use it on are pretty cheap, and make obvious business sense for a legit business - likewise for a phone number, which is also absent from the web pages. Both provide business points of contact and both provide trackability. Maybe I-Vendor doesn't want trackability. Hmmmm. So I download an exe file from a nearly anonymous site on AOL and run it to find out more about it? No thanks!!! It looks too much like a juicy worm on a hook to this fish. Lindsay Haisley (______) FMP Computer Services (oo) "The bull fmouse(a)fmp.com /------\/ stops here!" Austin, Texas, USA / | || 512-259-1190 * ||---|| * * * * * * ~~ ~~ http://www.fmp.com

1 0

From Our Friends at the Fed
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Mime-Version: 1.0 Date: Thu, 6 Nov 1997 20:23:25 -0800 From: jmuller(a)brobeck.com (John D. Muller) Subject: From Our Friends at the Fed To: rah(a)shipwright.com X-MIME-Autoconverted: from quoted-printable to 8bit by pop.sneaker.net id XAA28997 Thought this missive from the Federal Reserve (SR Letter 97-28 for those who insist on a formal citation) might be of interest. Not sure if it's e$ or dcsb or cypherpunk-type material or none of the above, so I punt and let you decide. Cheers. John Muller mailto:jmuller@brobeck.com ---------------------------------------------------------------------- -- Suggested Cover Letter To the Chief Executive Officer or General Manager of Each State Member Bank, Bank Holding Company, State Chartered, Non-Insured U.S. Branch or Agency of a Foreign Bank, and Edge and Agreement Corporation in Your District Dear ______________________: The Federal Bureau of Investigation, working with Federal Reserve staff and representatives from the other federal banking agencies as well as other federal law enforcement agencies, developed the attached guidance concerning the reporting of violations of the federal criminal statute relating to computer crimes, 18 U.S.C. ß 1030 (Fraud and Related Activity in Connection with Computers) in Suspicious Activity Reports (SARs). The guidance is intended to facilitate the timely and accurate reporting of apparent violations of this law to law enforcement and bank supervisory agencies. The guidance describes the provisions of 18 U.S.C. ß 1030 and gives some examples of conduct that may violate the law. It also tells you how to report violations in a SAR. We would appreciate you bringing this matter to the immediate attention of all personnel in your organization responsible for reporting suspicious activity. In the event you have any questions concerning this matter, please contact __________________________. Sincerely, [Reserve Bank Official] Attachment ---------------------------------------------------------------------- -- GUIDANCE CONCERNING THE REPORTING OF COMPUTER-RELATED CRIMES BY FINANCIAL INSTITUTIONS This guidance is provided in order to explain the federal criminal statute relating to computer crimes, 18 U.S.C. ß 1030, and to ensure the timely and accurate reporting of apparent violations of the statute to law enforcement authorities. Background Regulations issued by the Federal Reserve, OCC, FDIC, OTS, and NCUA generally require banks, thrifts, credit unions, the U.S. branches and agencies of foreign banks, and other types of financial institutions to file Suspicious Activity Reports (SARs) whenever they detect any known or suspected federal criminal law violation or suspicious activity. The SAR system facilitates the reporting of suspected criminal activity and money laundering in a standard format to a single collection point, from which the information may be rapidly disseminated to appropriate law enforcement agencies. SARs play a critical role in collecting information about criminal activity affecting the financial community. Under the five financial institutions supervisory agencies' current SAR rules, a financial institution is required to report any known or suspected criminal law violation involving an insider, regardless of amount. A financial institution is also required to report any known or suspected federal criminal law violation that involves or aggregates more than $25,000 in the event no suspect can be identified--a threshold that drops to $5,000 if a potential suspect can be identified. The current SAR form includes in Part III, Box 37, a listing of 17 various categories of criminal law violations and suspicious activities that a financial institution can check. The categories include check, credit and wire transfer fraud, defalcation/embezzlement and mysterious disappearances, and also include a general category under "Other" that is to be used in the event the offense or activity does not appear to fit any of the delineated types of crimes. There is no category in Part III, Box 37, specifically reserved for violations of the provisions of the U.S. criminal code relating to computer crimes--18 U.S.C. ß 1030 (Fraud and Related Activity in Connection with Computers). Criminal Law Relating to Computers Computers and computer networks are at the heart of operations of a modern financial institution. Criminals--both inside and outside of financial institutions-- recognize the potential vulnerability of computer systems. Consequently, financial institutions must be cognizant of the federal computer crime law, 18 U.S.C. ß 1030. This statute specifically includes as a "protected computer," among other computers shielded by the statute, any computer exclusively for the use of a financial institution, or, if not exclusively for such use, used by or for a financial institution where the conduct constituting the offense affects that use. Financial institutions should pay particular attention to three provisions of 18 U.S.C. ß 1030. Section 1030(a)(2) specifically prohibits intentionally accessing a protected computer to obtain certain kinds of information without authority or in excess of authority. Not only does it generally prohibit improperly obtaining information from any "protected" computer, but it specifically prohibits improperly obtaining information contained in a "financial record" of a financial institution. The provision may also apply to an individual who hacks into a financial institution computer system. "Financial record" is defined as information derived from any record held by a financial institution pertaining to a customer's relationship with the institution. Another provision applicable to financial institutions is the prohibition on using a "protected" computer without authorization or in excess of authorization to commit fraud. The provisions of 18 U.S.C. ß 1030(a)(4) criminalize the knowing use of a protected computer without authorization or in excess or authorization with intent to defraud, and by means of such conduct furthering the intended fraud and obtaining anything of value. Thus, an individual who intentionally uses another person's home banking software and purloins that person's password in order to transfer money fraudulently into his or her personal bank account has committed a crime. The third provision--18 U.S.C. ß 1030(a)(5)--with applications to financial institutions is the prohibition on intentional access without authorization that results in "damage" to a protected computer. Damage is defined to include any impairment to the integrity or availability of data, a program, a system, or information that causes loss aggregating at least $5,000 in value during any one-year period. An example may involve a disgruntled former employee who maintains a "back door" into the computer system and uses it to introduce a virus that disrupts the system. Another example may involve an intruder who causes a system outage by flooding an institution's computer system with e-mail requests for information. Other provisions of 18 U.S.C. ß 1030 applicable to financial institutions include subsection (a)(6), which outlaws trafficking in passwords knowingly and with intent to defraud. Subsection (a)(7) prohibits transmitting threats to cause damage to a protected computer with intent to extort money or any other thing of value from any legal entity, specifically including financial institutions. This prohibition applies regardless of whether any actual damage is caused, or whether the offender actually had the ability to cause such damage. A violation of 18 U.S.C. ß 1030 can result in a fine or imprisonment for up to ten years. Guidance A financial institution should report on a SAR any activity that appears to be violative of 18 U.S.C. ß 1030. If a reportable offense is detected, a financial institution should check Box 37r, marked "Other", and describe as completely as possible in Part VII, the narrative section of the SAR, the nature of the illegal or suspicious activity. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Save Money...Own your own Cable Descrambler!
by cableus＠ecast.net 17 Dec '03

17 Dec '03

Don't let your cable company force you to pay OUTRAGEOUS equipment costs to receive basic/premium channels. We are Midwest Electronics, Inc. America's LARGEST PROVIDER of cable converters and descramblers and we feel you shouldn't have to pay TOO MUCH any more! The Communications Act of 1996 approved by Congress and signed by President Clinton in February 1996 now allows cable subscribers to purchase cable converters and descramblers from independent vendors. We have 18 years experience in the cable industry. We carry most makes and models of cable converters and descramblers including Jerrold, Scientific Atlanta, Tocom, Zenith, Pioneer, Panasonic, Novavision and More. Our prices start at just $150.00. *** SPECIAL INTERNET OFFER *** Call us today at (800) 648-3030 M-F 8:00-5:00 C.S.T. with the model number of your cable company's converter/descrambler, usually found on top of your television, and receive a FREE Battery Charger with any combination unit purchase. *** ONLY THOSE NOTIFIED BY ELECTRONIC MAIL ARE ELIGIBLE *** Our SPECIAL Internet Promotion ends November 15, 1997. When calling please provide us with your e-mail address in order to receive your FREE BATTERY CHARGER!!! If are unable to take advantage of our offer at this time, but would like to receive our FREE CATALOG reply to us via e-mail at cableus(a)ecast.net with your mailing name or visit our WEBSITE at: http://www.midwestcable.com http://www.midwestcable.com More about us: * 30-Day Money Back Guarantee! * We Service What We Sell! * Personal Assistance Hotline! Note: No sales to TIME-WARNER or PARAGON cable franchise areas. ------------------------------------------------------------------------- If you would like to continue receiving updates on prices and other information from Midwest Electronics you may REPLY and type SUBSCRIBE in the SUBJECT line (Please be sure to include name, address and phone for your FREE CATALOG!). Otherwise, your address will be promptly removed from our lists and no further attempts will be made to contact you. -------------------------------------------------------------------------

1 0

Pauline Hanson's One Nation Monthly Newsletter
by Global Web Builders 17 Dec '03

17 Dec '03

Issue 1.4, November 1997 ---------------------------------------------------------------------------- ------- PLEASE NOTE: No unsolicited email is sent. If you do not want to be on the mailing list please say "REMOVE" in the subject line and return this message in the body. ---------------------------------------------------------------------------- ------- Dear supporter in NSW, Pauline Hanson's One Nation continues to grow an extraordinary rate. There are now over 200 branches of the party nationwide - this just twenty eight weeks after the April launch. The interest in what we have to say and the level of our support is best demonstrated by comparing the recent visits of National Senator Bill O'Chee and Pauline Hanson to the traditional National heartland of Gympie in central Queensland. At their respective dinners O'Chee managed to attract just 12 people while Hanson attracted a full house of 400! These are challenging times ahead for the party. With this explosive growth and interest the Manly head office of One Nation has come under enormous pressure with calls from the media, the growing need to manage the new branches and a number of related teething problems. Please be patient if you find delays in One Nation responding to an inquiry. This is due to the workload being faced by the Manly office. -------------------------------------------------------------------- As you will have read Pauline Hanson's One Nation will contest the Queensland state elections after an independent survey revealed that the party had, conservatively, up to 27% support in certain electorates. If you know of someone who would make a good candidate please contact Manly office on (02) 9976 0283 for application forms. Please note closing date for nominations is December 1st. -------------------------------------------------------------------- There have been a number of One Nation press releases during October. These can be viewed at: http://www.gwb.com.au/onenation/press -------------------------------------------------------------------- Pauline Hanson's on-line Working Group: There has been a tremendous response to the establishment of Pauline Hanson's on-line Working Group and we thank those who have become involved for their support. If you would like to participate please email the following information for consideration. Name, Contact details (address, phone, fax), membership number (this is a pre-requisite) and branch (default is Manly). -------------------------------------------------------------------- Like any growing political organisation Pauline Hanson's One Nation needs your financial support. Please help NOW if you are able... Their is an on-line form that can be printed out and posted together with your donation at: http://www.gwb.com.au/pledge.html Let's get that donation-meter reading moving! Pauline Hanson

1 0