December 2003 - cypherpunks-legacy

toc.htm
by Jim Choate 17 Dec '03

17 Dec '03

FEDERAL GUIDELINES FOR SEARCHING AND SEIZING COMPUTERS TABLE OF CONTENTS PREFACE INTRODUCTION I. KEY TERMS AND CONCEPTS A. DEFINITIONS B. LIST OF COMPUTER SYSTEM COMPONENTS C. DETERMINING THE COMPUTER'S ROLE IN THE OFFENSE II. GENERAL PRINCIPLES A. SEARCH WARRANTS B. PLAIN VIEW C. EXIGENT CIRCUMSTANCES D. BORDER SEARCHES E. CONSENT SEARCHES 1. Scope of the Consent 2. Third-Party Consent a. General Rules b. Spouses c. Parents d. Employers e. Networks: System Administrators F. INFORMANTS AND UNDERCOVER AGENTS III. SEIZING HARDWARE A. THE INDEPENDENT COMPONENT DOCTRINE B. HARDWARE AS CONTRABAND OR FRUITS OF CRIME 1. Authority for Seizing Contraband or Fruits of Crime 2. Contraband and Fruits of Crime Defined C. HARDWARE AS AN INSTRUMENTALITY OF THE OFFENSE 1. Authority for Seizing Instrumentalities 2. Instrumentalities Defined D. HARDWARE AS EVIDENCE OF AN OFFENSE 1. Authority for Seizing Evidence 2. Evidence Defined E. TRANSPORTING HARDWARE FROM THE SCENE IV. SEARCHING FOR AND SEIZING INFORMATION A. INTRODUCTION B. INFORMATION AS CONTRABAND C. INFORMATION AS AN INSTRUMENTALITY D. INFORMATION AS EVIDENCE 1. Evidence of Identity 2. Specific Types of Evidence a. Hard Copy Printouts b. Handwritten Notes E. PRIVILEGED AND CONFIDENTIAL INFORMATION 1. In General a. Doctors, Lawyers, and Clergy b. Publishers and Authors 2. Targets 3. Using Special Masters F. UNDERSTANDING WHERE THE EVIDENCE MIGHT BE: STAND-ALONE PCs, NETWORKS AND FILE-SERVERS, BACKUPS, ELECTRONIC BULLETIN BOARDS, AND ELECTRONIC MAIL 1. Stand-Alone PCs a. Input/Output Devices: Do Monitors, Modems, Printers, and Keyboards Ever Need to be Searched? b. Routine Data Backups 2. Networked PCs a. Routine Backups b. Disaster Backups G. SEARCHING FOR INFORMATION 1. Business Records and Other Documents 2. Data Created or Maintained by Targets 3. Limited Data Searches 4. Discovering the Unexpected a. Items Different from the Description in the Warrant b. Encryption H. DECIDING WHETHER TO CONDUCT THE SEARCH ON-SITE OR TO REMOVE HARDWARE TO ANOTHER LOCATION 1. Seizing Computers because of the Volume of Evidence a. Broad Warrant Authorizes Voluminous Seizure of Documents b. Warrant is Narrowly Drawn but Number of Document to be Sifted through is Enormous c. Warrant Executed in the Home d. Applying Existing Rules to Computers 2. Seizing Computers because of Technical Concerns a. Conducting a Controlled Search to Avoid Destroying Data b. Seizing Hardware and Documentation so the System Will Operate at the Lab I. EXPERT ASSISTANCE 1. Introduction 2. Finding Experts a. Federal Sources b. Private Experts (1) Professional Computer Organizations (2) Universities (3) Computer and Telecommunications Industry Personnel (4) The Victim 3. What the Experts Can Do a. Search Planning and Execution b. Electronic Analysis c. Trial Preparation d. Training for Field Agents V. NETWORKS AND BULLETIN BOARDS A. INTRODUCTION B. THE PRIVACY PROTECTION ACT, 42 U.S.C. § 2000aa 1. A Brief History of the Privacy Protection Act 2. Work Product Materials 3. Documentary Materials 4. Computer Searches and the Privacy Protection Act a. The Reasonable Belief Standard b. Similar Form of Public Communication c. Unique Problems: Unknown Targets and Commingled Materials 5. Approval of Deputy Assistant Attorney General Required C. STORED ELECTRONIC COMMUNICATIONS VI. DRAFTING THE WARRANT A. DRAFTING A WARRANT TO SEIZE HARDWARE B. DRAFTING A WARRANT TO SEIZE INFORMATION 1. Describing the Place to be Searched a. General Rule: Obtain a Second Warrant b. Handling Multiple Sites within the Same District c. Handling Multiple Sites in Different Districts d. Information at an Unknown Site e. Information/Devices Which Have Been Moved 2. Describing the Items to be Seized 3. Removing Hardware to Search Off-Site: Ask th Magistrate for Explicit Permission. 4. Seeking Authority for a No-Knock Warrant a. In General b. In Computer-Related Cases VII. POST-SEARCH PROCEDURES A. INTRODUCTION B. PROCEDURES FOR PRESERVING EVIDENCE 1. Chain of Custody 2. Organization 3. Keeping Records 4. Returning Seized Computers and Materials a. Federal Rules of Criminal Procedure: Rule 41(e) b. Hardware c. Documentation d. Notes and Papers e. Third-Party Owners VIII. EVIDENCE A. INTRODUCTION B. THE BEST EVIDENCE RULE C. AUTHENTICATING ELECTRONIC DOCUMENTS 1. "Distinctive" Evidence 2. Chain of Custody 3. Electronic Processing of Evidence D. THE HEARSAY RULE IX. APPENDICES APPENDIX A: SAMPLE COMPUTER LANGUAGE FOR SEARCH WARRANTS 1. Tangible Objects a. Justify Seizing the Objects b. List and Describe the Objects (1) Hardware (2) Software (3) Documentation (4) Passwords and Data Security Devices 2. Information: Records, Documents, Data a. Describe the Content of Records, Documents, or other Information b. Describe the Form which the Relevant Information May Take c. Electronic Mail: Searching and Seizing Data from a BBS Server under 18 U.S.C. § 2703 (1) If All the E-Mail is Evidence of Crime (2) If Some of the E-Mail is Evidence of Crime (3) If None of the E-Mail is Evidence of Crime d. Ask Permission to Seize Storage Devices when Off-Site Search is Necessary e. Ask Permission to Seize, Use, and Return Auxiliary Items, as Necessary f. Data Analysis Techniques 3. Stipulation for Returning Original Electronic Data APPENDIX B: GLOSSARY APPENDIX C: FEDERAL EXPERTS FOR COMPUTER CRIME INVESTIGATIONS APPENDIX D: COMPUTER SEARCH AND SEIZURE WORKING GROUP APPENDIX E: STATUTORY POPULAR NAME TABLE APPENDIX F: TABLE OF AUTHORITIES Cases Statutes Federal Rules Federal Regulations Legislative History Reference Materials Go to . . . CCIPS Home || Justice Home Page _________________________________________________________________ Updated page May 9 , 1997 usdoj-jmd/irm/css/mlb _________________________________________________________________

1 0

Re: On the LAM--Local Area Mixes (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 22 Jan 1998 21:29:55 -0500 (EST) > From: Ryan Anderson <ryan(a)michonline.com> > Subject: Re: On the LAM--Local Area Mixes (fwd) > On Thu, 22 Jan 1998, Jim Choate wrote: > > > Are police considered an extension of the judicial or the executive arm of > > the government? > > In theory, executive. (That way legislative writes laws, executive > decides if they want to enforce them, judicial decides if they're legal or > not.. ) In theory, of course.. First, I knew the answer, I was looking for a lead-in...thanks. Then how, Constitutionaly speaking, do they have get the responsbility to search when it is clearly a judicial responsibility (that is where it is in the Constitution) and in cases such as Evans -v- Gore the Supreme Court has found that the judicial body can't transfer or relinquish it's responsibilities even if it *wants* to? I suspect that, again Constitutionaly speaking, the only system that would pass strict muster would be something similar to the Dutch which prohibit the police from executing a search until *after* review by a legislative representative. This is a rhetorical question, I don't expect you or anyone else to respond to it. Just think about it... ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

Re: (eternity) Re: Eternity Services
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 08:18 AM 1/12/98 +0100, Lucky Green wrote: >On Mon, 12 Jan 1998, Ryan Lackey wrote: >[quoting Tim] >> >> > (* I say "working" in the sense that the concept was very easy to >> > demonstrate just by using PGP and remailers. Not much more than what I >> > demonstrated in 1993 would be needed to deploy a real system. Except for >> > one thing: true digital cash. Not the bullshit one-way-traceable stuff that >> > Chaum and others are now pushing, but the original, online-cleared or >> > escrow-cleared form, a la the work of Goldberg et. al. For some of these >> > applications, below, simple token- or coupon-based schemes might work >> > adequately.) >> >> There are currently-under-development systems which will meet the digital cash >> requirement, >> from people who I consider highly respectable and competent. > >And the demand for such ecash systems is real. I personally carried a $10 >million offer for a non-exclusive license for the blind signature patent >to David Chaum. He declined the offer. "The patent is not for license". >DigiCash's CEO since March of last year, Mike Nash, also told me that >DigiCash was not considering licensing the patent. I knew that day that it >was time to quit. Not surprisingly, nobody heard from DigiCash since. > >-- Lucky Green <shamrock(a)cypherpunks.to> PGP v5 encrypted email preferred. > "Tonga? Where the hell is Tonga? They have Cypherpunks there?" > >

3 2

Re: (eternity) Service denial attacks on Eternity
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 04:51 PM 1/12/98 +0000, Ross Anderson wrote: >Tim May wrote: > >> It is also likely in the extreme that a working Eternity service will >> quickly be hit with attackers of various sorts who want to test the limits >> of the service, or who want such services shut down. > >Exactly. When I first talked about Eternity, which was at either the >1994 or 1995 protocols workshop, I was walking back to my seat when >Bob Morris (then at the NSA) said, from behind his hand in a stage >whisper, `Kiddyporn!' > >Adam Back added: > >> the spooks / feds have a history of posting their own child porn if >> none is available to seize > >Indeed, and a decade or so ago there was a scandal when it turned out >that the spooks were using the Kincora Boys' Home in Belfast as a pedo >brothel in order to entrap various local politicians. For them to say >now that they need key escrow to suppress Kiddyporn is a bit rich! > >However the main threat is the court order - Anton Pillar or whatever >- and the best weapon against court orders is anonymity. If they don't >know your address they can't serve you the order or arrest you for >contempt. > >Tom Womack: > >> I can imagine *use* of the service becoming a felony > >I mentioned in the paper that Mossad might deny Eternity service to >the Muslim world by posting something rude about the Prophet Mohammed. > >One must of course create a lawful excuse for people to have Eternity >software mounted on their system. Maybe in addition to the `public' >Eternity service we should have many corporate or even private >services, many of which have escrow capabilities and are thus clearly >law-abiding and accountable :-) > >There are many other possibilities. One topic that oozes into my >consciousness from time to time is that one might integrate covert >communications and storage with an anti-spam mail program - maybe a >natural way forward if Adam hides Eternity traffic in spam! > >Tim again: > >> Great idea, but where are the customers? > >Some 90% of security research effort is on confidentiality, 9% on >authenticity and 1% on availability. Corporate infosec expenditures >are exactly the other way round, and tools to enable disaster recovery >databases to be spread holographically over a company's PCs could save >a fortune compared with the cost of some current arrangements. If a >few of these backup resources have hidden directories that mount the >public Eternity service, then who can tell? > >At the Info Hiding Workshop at Portland in April, I will present a new >idea which may facilitate such implementations of Eternity. This is >the Steganographic File System - designed to provide you with any file >whose name and password you know. If you don't know this combination, >then you can't even tell that the file is there. We do not need to >make any assumptions about tamper resistance; it can be done using >suitable mathematics. (This is joint work with Roger Needham and Adi >Shamir.) > >Ross > >PS: we need a better word for `eternityspace', and Bell Labs have >already trademarked `Inferno'. So what - Nirvana? Valhalla? >

2 1

Re: (eternity) autonomous agents
by redgod＠usa.net 17 Dec '03

17 Dec '03

FUCK! WHO REGISTER ME TO THIS MAILING LIST? CAN YOU TELL ME HOW TO REMOVE MYSELF FROM IT? I WILL MAD! OH GOD! TOO MANY EMAIL! At 03:51 PM 1/13/98 -0800, William Knowles wrote: >On Tue, 13 Jan 1998, Tim May wrote: > >> At 1:23 PM -0800 1/13/98, William Knowles wrote: >> >> >Anguilla seems to be a doing agood job on becoming a country >> >willing on hosting data havens. >> >> Oh yeah? >> >> It's been a while since we talked about this (at least on the Cypherpunks >> list), but a couple of years ago there was much discusson on the CP list >> about just what items would be allowable in Anguilla. Vince Cate gave his >> assessment, which I found fairly nebulous, in that it appeared the Ruling >> Families would allow what they would allow, and not allow what they would >> not allow---there seemed to be a lot of ad hoc rulings. > >If memory serves me right it was because Vince bounced off the Taxbomber >site because it offered second passports, camouflage passports, and other >products that was considered a fraud, Which to me sounds odd since there >is some other company selling most everthing and then some from an .ai >domain which Vince's company has the monopoly on handing out .ai domains > >http://www.ultramec.com.ai > >> (Given that copies of "Penthouse" are illegal in Anguilla, if I recall this >> correctly, and given that gun are illegal, and drugs are illegal, I rather >> doubt that Anguilla would happily host "The Aryan Nations Bomb Site," or >> "Pedophile Heaven," or "Gun Smuggler's Digest. " Or the even juicier stuff >> any "data haven" with any claim to really being a data haven will surely >> have.) > >You also have to wonder how far in the future it will be before the >special forces of some banana republic drops in on Vince to blow-up >his operation for as he advertises publishing censored information >on ones ex-president on the Internet, or for that matter I have >yet to see abortion information coming from his servers. > >What has happened in Anguilla proves that there will be a need for >different flavors of datahavens, Different degrees libility that >datahaven owners will want to store information on their servers. >I would love to open a XXX WWW site in Anguilla pulling in the >industry average of $5-10K a month and not pay any taxes there, >But it won't happen in Anguilla with the present adminstration! > >> >And there are likely under a hundred oil companies looking >> >for firms to 'recycle' their old oil platforms and drilling >> >rigs wasting away around the world, I'm sure some might just >> >give you one just to be rid of future liability. >> >> Given the willingness of the French to have SDECE sink Greenpeace ships in >> neutral ports, how long before a couple of kilos of Semtex are applied to >> the underside of these oil rigs? >> >> Given what happened with "pirate broadcast tankers," the future is not bright. > >Isn't there a microstate off the coast of England called 'Sealand' run >from a former oil rig/gun battery for the last 20 years? > >> When the first "oil rig data haven" is found to have kiddie porn, >> bomb-making info, and (shudder) material doubting the historicity of the >> Holocaust, the U.N. will cluck and the public will cheer when it is boarded >> and seized, or simply sunk. >> >> As I said in my last piece on this subject, there is no security in >> meatspace comparable to what is gotten with mathematics. >> >> --Tim May > >I agree completely, But there is still room for massively distrubted >datahavens on oil rigs, barges, gun batteries, island nations or >hiding in Norm's LAN in Cicero IL. All the harder to supress that >information. > > >William Knowles >erehwon(a)dis.org > >== >The information standard is more draconian than the gold >standard, because the government has lost control of the >marketplace. -- Walter Wriston >== >http://www.dis.org/erehwon/ > >

1 0

Re: SC rules 1st doesn't cover lies [CNN] (fwd)
by Anonymous 17 Dec '03

17 Dec '03

>So you have to be an employee of the government to be a citizen? Yes. Welcome to America, Land of the Freeh.

1 0

Supplement to DoJ Seizure Guide
by John Young 17 Dec '03

17 Dec '03

There's a long October 1997 supplement to the 1994 DoJ Guide to Search and Seizure of Computers for which Jim Choate posted the TOC just now. It reflects recent campaigns, raids and counterattacks as the battle for supremacy between law and technology intensifies and both sides search and seize each's best and worst: http://jya.com/doj-ssgsup.htm (100K)

1 0

FW: Symantec Norton, Your Eyes Only.
by Pearson Shane 17 Dec '03

17 Dec '03

Anyone? > -----Original Message----- > From: Pearson Shane > Sent: Thursday, January 15, 1998 1:25 PM > To: 'cypherpunks(a)toad.com' > Subject: Symantec Norton, Your Eyes Only. > > > Hey all, > > Just wondering what people think of this product? > Good, bad or ugly? > > Is there an international version and a US version? > > If so, what limitations are in the international version? > > Many thanks...

2 1

Censorship free ISP
by White Liberty 17 Dec '03

17 Dec '03

Sorry for the cross-posting, but some of the readers may hopefully address this: Could you recommend me a censorship FREE InterNet Service Provider that in addition to a "no censorship" policy also guarantees your privacy. I am an ex-patriate Danish who live in the United States, but has a friend who wants to publish material deemed hateful in my birth country. In Denmark, they still struggle with laws abridging freedom of expression in regard to "hate speech." Could you recommend any ISP to me in the United States that satisfies this? I know Cyberpass in California does not censor based on content. But I am sure there are many many others. Please respond in personal mail or to cypherpunks(a)cyberpass.net.

1 0

State of the Union Address
by Anonymous 17 Dec '03

17 Dec '03

>Hear that the State of the Union next Monday has a section on Internet - >networks - critical infrastructure protection et al. Anyone have any >details? My bet is that it'll be the same as it always is. Klintonkov will rant about how he wants to censor the Internet. Then he'll go on and on about how he wants to connect every public school to the Internet and tax me to give these kids censored feeds, all when the students are coming out of the school system as complete morons. Some can't read, many can't do math, most have absolutely no clue about basic science, and most have absolutely no idea about the Bill of Rights and freedom of speech[1]. And of course he'll have to throw in a long diatribe about how Americans need to surrender more of their freedom to the government. Maybe he'll even mention how he doesn't remember screwing a reasonably attractive woman half his age in the White House while she was a White House intern. [1] Grab a totally random sample of 100 high school students. Haul the students out one at a time and ask them the following questions: 1) What is the acceleration of gravity at sealevel on Earth? 2) What are airlocks? What are they used for? How do they work? 3) How many chromosomes are in a normal, healthy human? 4) Joe is one of your classmates. He elects not to say the "Pledge of Allegience." Which of the following is true? a) He must say it because it is mandated by the government. b) He may not say it, but he must stand. c) He is not required to acknowledge it, except to allow others to say it if they wish to. d) He should be taken out behind the school and beaten with a sledgehammer. Afterwards his brains should be used to spell the words "Death to traitors!" e) He should be sent to the principal's office for disciplinary action. f) He should be expelled from the country. g) He must do so as long as he is a U.S. citizen. 5) Explain the equation 'f=m*a' and Newton's Third Law. 'f=m*a' is referenced in the context of Newtonian motion. 6) The First Amendment of the United States Constitution orders which of the following? a) Congress shall not restrict freedom of speech, the press, assembly, or religion. b) Congress shall not restrict freedom of speech, the press, assembly, or religion, except as ordered by the majority. c) Congress and private individuals may not descriminate on the basis of sex. d) Congress and private individuals may not restrict freedom of speech, the press, assembly, or religion. 7) What are the following government agencies and what are their function? a) FCC b) NSA c) CIA d) FBI e) DEA f) BATF g) NTSB h) DOJ 8) Your city passes a "teen curfew" law ordering criminal penalties for anybody younger than 18 who is out after 10PM on school nights. The law was passed by popular vote at this year's elections. Which of the following is true? a) This is a just and fair law, and is completely constitutional. Teenagers have no reason to be out past 10PM on school nights. They should be at home and asleep. b) This law violates the thirteenth amendment. c) This law violates the first amendment. It violates freedom of assembly. d) This is a constitutional law. Freedom of assembly does not apply because the people voted on this law and it passed by majority vote. 9) How many senators does each state have? 10) "What a piece of work is man; how noble in reason; how infinite in faculty, in form, in moving; how express and admirable in action..." Name the author. 11) Michelle mixes one gram of HCl and one half gram of NaOH. Under normal circumstances, what is produced and in what quantities? 12) (sin(9)^2 + cos(9)^2)=x. If this quantity can be determined, what is x equal to? 13) What is the square root of 256? 14) What is the fourth root of 81? 15) Given complete control of the environment, how could one cause pure water to boil at 96 degrees C? 16) Explain possible problems with cloning of humans. Analysis: Keep in mind that I'm talking about high school graduates or people who have almost graduated high school here, and these are people who have taken the appropriate courses. Back in high school I made the mistake of making some comments and assuming in class discussions that people had basic knowledge. I was wrong. Okay, so I was naive. Eventually I gave up and stopped participating simply because I was sick and tired of doing the school's job for them. 1) Most students probably won't have any idea. The value, of course, is about 9.81 m/s^2. 10 m/s^2 doesn't work although that's given in the mathematics books they give these kids. Most of them probably won't even know what the question is asking. 2) I actually brought this topic up to a group of *honors* students. Think of the expression "shove you out an airlock" for context. They boggled, wallowed in their ignorance and were proud, and then went off to their think tank. After confering with each other they came back with the breathtakingly brilliant answer that it was a contraceptive device. Of course even after explaining to them what it was they still didn't get the reference, had no grasp of how such a thing might work, and had no idea what it might be useful for. 3) This is taught in elementary biology which, at least down here, is a required course. They had no idea. Actually, most of them had no clue about basic genetics at all. Yes, basic genetics was covered in the course, and this material was included. 4) I was "Joe" in this case. The people involved had already taken a semester government course. Their answer to the question would have been along the lines of option 'd'. 5) I made a big mistake assuming they knew this one. Oops. 6) Most seemed to believe 'b' or 'd'. Maybe they knew it was 'a' and thought that maybe people wouldn't notice. 7) I made the mistake of using designations like this in a political science class during a class discussion. I regretted it when I had to start explaining these agencies and what they were supposed to be responsible for. 8) No explanation required. 9) "You expect me to memorize that for all 50 states?" "Nevermind." 10) Shakespeare. It wouldn't be so bad if they hadn't had to read Hamlet, MacBeth, and others in their English classes. Yipes. 11) "How am I supposed to know?" "Uh, you got out of chemistry with a B." "Yes, but they never gave me problems like that!" Uhhh... 12) Most probably couldn't solve it without a calculator. 13) Ditto. 14) Ditto. 15) They'll probably look at you like you're nuts and explain that you can't. Uh, right. 16) In an international relations class I took students picked a side and tried to argue it. Mine was pro-cloning or, more accurately, pro-science. Most were anti-cloning. Why? a) "God doesn't like us to do things like that." Right. Let's go outlaw fields of research based on one religion and what followers of one religion think their god is thinking at that moment. This is America, not Iraq. b) "How would you like it if somebody just came up and cloned you without you knowing and then made that person tell them information you refused to give them yourself?" Okay, I can buy the unwillful cloning part of it and could support a law on the grounds that it's theft of genetic material or for a variety of other reasons. As for the rest of that...ugh. Now maybe people on this list can't answer some of these either. That isn't the point. The point is that you should have been taught this stuff in school. Klintonkov wants to go blow millions (billions?) of dollars for censored network feeds in the schools and they haven't even got basic education down? And don't say "computer literacy" either. Most high school graduates can barely type on the bloody things, and they can forget about actually fixing a problem themselves. The *teachers* are blatently clueless. When Klintonkov fixes these problems he can talk about "wiring our schools for the 21st century." Of course then he'll want to censor the feeds or the net at large, at which point we're back to square one and should spend the money on something useful, like paying off the multi-trillion dollar debt the idiots ran up. Here's the scariest part of it all: These people are voting! And we wonder why we're in such a mess. The war isn't the war between the blacks and the whites, the liberals and the conservatives, or the Federation and the Romulans. It's between the clueful and the clueless.

9 13

RE: FW: Symantec Norton, Your Eyes Only.
by Pearson Shane 17 Dec '03

17 Dec '03

Hi William, Many thanks for the reply. I was hoping it was ok having Blowfish, but I guess it could be their own "efficient" version. Bye for now. > -----Original Message----- > From: William H. Geiger III [SMTP:whgiii@invweb.net] > Sent: Friday, January 23, 1998 2:12 PM > To: Pearson Shane > Cc: 'cypherpunks(a)toad.com' > Subject: Re: FW: Symantec Norton, Your Eyes Only. > > -----BEGIN PGP SIGNED MESSAGE----- > > In <01ISPY42BHTU00B7O0(a)hmgwy1.isd.tafensw.edu.au>, on 01/23/98 > at 02:56 PM, Pearson Shane <Shane.Pearson(a)tafensw.edu.au> said: > > >Anyone? > > >> -----Original Message----- > >> From: Pearson Shane > >> Sent: Thursday, January 15, 1998 1:25 PM > >> To: 'cypherpunks(a)toad.com' > >> Subject: Symantec Norton, Your Eyes Only. > >> > >> > >> Hey all, > >> > >> Just wondering what people think of this product? > >> Good, bad or ugly? > >> > >> Is there an international version and a US version? > >> > >> If so, what limitations are in the international version? > >> > >> Many thanks... > > > Is source code available for peer review? NO > > Is it US Commercial software? YES > > I wouldn't use it to secure an outhouse. No source no trust. > > - -- > - --------------------------------------------------------------- > William H. Geiger III http://users.invweb.net/~whgiii > Geiger Consulting Cooking With Warp 4.0 > > Author of E-Secure - PGP Front End for MR/2 Ice > PGP & MR/2 the only way for secure e-mail. > OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html > > - --------------------------------------------------------------- > > Tag-O-Matic: If at first you don't succeed, work for Microsoft. > > -----BEGIN PGP SIGNATURE----- > Version: 2.6.3a-sha1 > Charset: cp850 > Comment: Registered_User_E-Secure_v1.1b1_ES000000 > > iQCVAwUBNMgK6Y9Co1n+aLhhAQF08wP/abLg8ftPY7nuJ1hp8OKi6Ik2lx7A70/3 > 0GU++TZAmLWJ4XKlgCiujm0Z06P3rSEf+qtiIOTfFKUaN4kvt9JlmkH6h8fmuAJf > t48Cq5XQbeYDMJ6HjvGpPraZJd5zmqv54UQuUjswZBONNIMqt+ypy6id/hpe0BY9 > mOg9VyMW1cM= > =aNiz > -----END PGP SIGNATURE-----

2 1

Re: 10th FIRST
by William H. Geiger III 17 Dec '03

17 Dec '03

------------------------------------------------------------------------- The following message is forwarded to you by "William H. Geiger III" <whgiii(a)invweb.net> (listed as the From user of this message). The original sender (see the header, below) was Vicente Garcia <vggarcia(a)campus.mty.itesm.mx> and has been set as the "Reply-To" field of this message. ------------------------------------------------------------------------- >From: Vicente Garcia <vggarcia(a)campus.mty.itesm.mx> >Newsgroups: comp.security.pgp.resources >Subject: 10th FIRST >Date: Tue, 20 Jan 1998 18:38:39 -0600 >Organization: ITESM Campus Monterrey . DINF-DTCI >Lines: 371 >Message-ID: <34C5438D.F8F99029(a)campus.mty.itesm.mx> >NNTP-Posting-Host: vangelis.mty.itesm.mx >Mime-Version: 1.0 >Content-Type: text/plain; charset=us-ascii >Content-Transfer-Encoding: 7bit >X-Trace: news.mty.itesm.mx 885343029 6704 (None) 131.178.17.111 >X-Complaints-To: news(a)news.mty.itesm.mx >X-Mailer: Mozilla 4.01 [en] (Win95; I) >X-Priority: 3 (Normal) >Path: edison.dotstar.net!pull-feed.internetmci.com!opus.ies-energy.com!news.cs.utwente.nl!cosy.sbg.ac.at!wuff.mayn.de!Cabal.CESspool!bofh.vszbr.cz!cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!cs.utexas.edu!news.uh.edu!news.mty.itesm.mx!not-for-mail -----BEGIN PGP SIGNED MESSAGE----- ************************************************************* * * * Forum of Incident Response and Security Teams (FIRST) * * * * Tenth Annual Computer Security Incident Handling Workshop * * * * Monterrey, Mexico * * * * Monday 22-Jun-1998 to Friday 26-Jun-1998 (inclusive) * * * ************************************************************* C A L L F O R P A P E R S Submission Deadline: January 15, 1998 "The challenges of incident handling in a diverse world" The Forum of Incident Response and Security Teams (FIRST) was formed in November 1990 to address the problem of an ever increasing number of computer and network security related incidents, affecting thousands of systems around the world. The forum is made up of government, private and academic Computer Security Incident Response Teams from around the world. Its primary goal is to coordinate the efforts of its members in order to increase both their individual and collective effectiveness. The annual Incident Handling Workshop is part of FIRST's ongoing educational program, which is aimed at increasing the general awareness of security issues and improving expertise when handling computer security incidents. Specific security problems can affect many individuals and organizations around the world, possibly involving many different technological environments. Each of the parties involved must tailor its actions to the context in which the problem is experienced. Factors which must be taken into account include: * Cultural: The way in which a problem is tackled can be highly influenced by the historical development of the community in question. Examples are the ability for open communication about problems or values regarding privacy. * Professional: Today the Internet is open to the masses. The ease of communication, the advent of electronic commerce, and the availability of information, makes it a playground and a library for the masses. It is also a key business tool which professionals depend upon. * Political: Political decisions of individual countries concerning key areas of computer security, e.g. restrictions in the use and export of cryptological technology, may change the way that security problems must be approached. Legalities pertaining to diverse use of computer systems vary widely between countries. * Technological: Different technologies, covering a wide spectrum that includes mainframes, unix workstations, personal computers and network computers are connected to the same network simultaneously. Who should attend? __________________ All those responsible for any aspect of computer security management will benefit from attending this workshop. This includes both members and non-members of FIRST, law enforcement officials, computer security incident response teams, as well as consultants, contractors, vendors and individuals involved in the use, maintenance or planning of computer systems. Why attend? ___________ The character of the Internet is changing rapidly. Not only has the commercial community discovered new possibilities offered by "direct" marketing and advertisement. Governmental and non-academic organizations have also turned their attentions to the potential of the Internet. Incident Handling must adapt to the changing user base of the Internet. In addition to the opportunity for those involved in computer security to get together and discuss all aspects of the subject, the workshop will provide the opportunity to listen to experts in the fields of computer security incident response and vulnerability analysis. They will share their valuable expertise by speaking about their experience in dealing successfully with the coordination of incidents traversing international boundaries, highlighting particular problems where appropriate. There is no other workshop dedicated to this topic in the world. Important Dates: ________________ Abstract/Proposals Due: January 15, 1998 Authors Notified: February 10, 1998 Full Materials for Proceedings Due: April 1, 1998 Format of the workshop: _______________________ The first day is allocated for parallel tutorial style presentations. The remaining four days will consist of conference paper and workshop style presentations, as well as FIRST business sessions. One evening is allocated for participants to hold events devoted to subjects of particular interest ("birds of a feather" sessions). All events will be selected to further the objectives of FIRST and its members. They may involve topics such as computer security incident handling, team and incident response coordination, tools, international issues, or work in progress. A list of example topics can be found at the end of this announcement. Contributions should follow the following guidelines: Tutorials: Half or full day tutorial proposals will be considered. Papers: Written papers may be as long as desired, but presentations must be limited to 30 minutes. Workshop: These informal sessions should either follow a more "hands-on" approach or provide for a high degree of audience participation. They should be tailored to address specific issues and should be from 60 to 90 minutes in duration. Panel Sessions on a particular topic are acceptable. Submission information: _______________________ Submissions should include an abstract, proposed length and single page of notes describing the content and style of the presentation. Special audio/visual requirements (other than one microphone and one overhead projector) should be described. Panel session proposals should include a list of panelists who have agreed to participate. Submissions should be sent to the contact address given at the end of this document. The preferred submission mechanism is via electronic mail in ASCII, HTML or PostScript formats. Submissions via Facsimile transmission or the postal service will, however, be accepted. Submissions must be received by the January 15, 1998. Submissions received after this date may not be considered for inclusion in the program. Please use the appended form for your submissions. Authors will be notified by the February 10, 1998 of the status of their presentation (accepted/rejected). The final version of the material used for the presentation (overheads, papers, slides) must be delivered to the organizers by the April 1, 1998 for inclusion in the proceedings. Email: ______ Please use the email address first-pc98(a)first.org for submissions or questions regarding the call for papers. WWW: ____ The Workshop WWW page is accessible from the FIRST webserver: http://www.first.org/workshops/1998/ Program Committee: __________________ Wolfgang Ley, DFN-CERT, Germany (Program Chair) Brian Dunphy, ASSIST, USA Eric A. Fisch, Trident Data Systems, USA Eric Halil, AUSCERT, Australia Stephen Hansen, Stanford University, USA Ahmet Koltuksuz, IZMIR Inst. of Technology, Turkey Sherman O. Loges, Boeing, USA Paul Mauvais, CIAC, USA Fran Nielsen, NIST, USA Steve Romig, Ohio State, USA Roger Safian, Northwestern University, USA Miguel J. Sanchez, SGI, USA Sandy Sparks, CIAC, USA Don Stikvoort, CERT-NL, Netherlands Wietse Venema, TU Eindhoven, Netherlands Mark Zajicek, CERT Coordination Center, USA Conference Location: ____________________ Monterrey, Mexico Dates: _____ Mon June 22, 1998 - tutorials (parallel streams) Tue June 23, 1998 to Fri June 26, 1998 (workshop). Conference Host: ________________ Instituto Tecnologico y de Estudios Superiores de Monterrey (ITESM), Mexican CERT (MxCERT). The workshop is sponsored by First.Org Inc. Contact Information: ____________________ Electronic Mail: first-pc98(a)first.org Postal Address: Attn: Wolfgang Ley DFN-CERT Univ. of Hamburg Vogt-Koelln-Str. 30 22527 Hamburg Germany Facsimile: +49 40 5494 2241 Subject: FIRST 1998 Workshop Example Topics (other topics may be considered): Dealing with the increasing diversity in all areas International Legal Issues Legal and Administrative Issues in Incident Handling Coordinating International Incidents Incident Handling and the Internet Security on Large Networks other than the Internet How to Protect an Incident Response Team Site Interviewing/Hiring Incident Response Team Staff Outsourcing an Incident Response Team Vulnerability/Advisory Processes New Tools for Incident Handling Statistic Tools Informational Resources Programming Securely Preventing Incidents Intrusion/Vulnerability Detection Tools System/Network Monitoring Tools The Changing Nature of the "hack" Internet Service Providers and Security Vendor Session Collecting Evidence =========================================================================== ABSTRACT / PROPOSAL SUBMISSION SHEET FIRST 1998 Name __________________________________________________________ Address __________________________________________________________ __________________________________________________________ __________________________________________________________ Phone ____________________ Fax _______________________ E-mail ____________________ URL _______________________ Title of Presentation ____________________________________________ Presentation Type ( please tick one ) ( ) Paper ( ) Half-day Tutorial ( ) Workshop ( ) Full-day Tutorial ( ) Panel Presentation Length (in minutes) ______ Presentation Media Requirement (other than one overhead projector and a microphone): _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ Abstract ( 75-100 words ) _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ FIRST is granted an non exclusive right to copy and redistribute conference material including the submissions of the author(s). This includes possible distribution on a conference CD and/or the FIRST website. Brief Biography ( 50-75 words ) _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ _____________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: 2.6.2i iQCVAwUBNHit6QQmfXmOCknRAQFQQQP6Ao1CYieDoeHK1BFqypC6QjVKXeNLEjY+ jq2HgNBSvxuysHH1fNnqNxMRJSHWyFw+yEJJk3TFXL6tyIOIojbfnzH88crtdMah yzMYZL+APdTf3JppF8ipeIO8HygwMVt/BuRtW7JUCPvN5b7Vj1jDfc8pqOE786np eAExY1mgrSk= =LqxA -----END PGP SIGNATURE----- -------------------------------------------------------------------- MR/2 PGP Signature Check 22 Jan 1998 22:58:34 -------------------------------------------------------------------- Key matching expected Key ID 8E0A49D1 not found in file 'pubring.pgp'. WARNING: Can't find the right public key-- can't check signature integrity. -------------------------------------------------------------------- MR/2 PGP Signature Check [Secondary Keyring] 22 Jan 1998 22:58:34 -------------------------------------------------------------------- WARNING: Bad signature, doesn't match file contents! Bad signature from user "Wolfgang Ley, DFN-CERT <ley(a)cert.dfn.de>". Signature made 1997/11/23 22:28 GMT using 1024-bit key, key ID 8E0A49D1 WARNING: Because this public key is not certified with a trusted signature, it is not known with high confidence that this public key actually belongs to: "Wolfgang Ley, DFN-CERT <ley(a)cert.dfn.de>". PGPRC=1 PGPRC2=1 ----------------------------------------------------- -- End of forwarded message ----------------------------------------------------- -- --------------------------------------------------------------- William H. Geiger III http://users.invweb.net/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html --------------------------------------------------------------- Tag-O-Matic: The sad thing about Windows bashing is it's all true.

1 0

How to eliminate liability?
by John M 17 Dec '03

17 Dec '03

This is just an idea I thought I would throw out and see what happens. There has been considerable discussion recently about datahavens, how no one physical location in meatspace is safe, and how there is no single place on earth that a datahaven could exist that would accept all kinds of information. Well, what about spreading the information out? Something simple like doing a matrix rotation on the scrambled data in 8 byte blocks and splice it by bit to split the data up, add ECC (error correction code) to it, and spread it to several servers. This way no one server has all the information necessary to recreate the "offending" information and if one server gets "hit" (killed), the information can still be regenerated from the the information and ECC from the other servers. The bit splitting I'm talking about would go something like this. The data would be set up in clusters of eight bytes and then these eight bytes would be rotated, error correction applied, divided byte by byte to separate queues (for separate destinations), resequenced to include the ECC overhead, and sent on it's merry way. Original encrypted information: Cluster A Cluster B... Byte 1: 01001011 Byte 2: 10101110 Byte 3: 10010110 Byte 4: 10110111 Byte 5: 01011100 Byte 6: 10111011 Byte 7: 10001101 Byte 8: 00110110 After the matrix rotate: Cluster A Cluster B... Byte 1: 01110110 Byte 2: 10001000 Byte 3: 01010101 Byte 4: 00111101 Byte 5: 11001110 Byte 6: 01111011 Byte 7: 11110101 Byte 8: 10010110 Add ECC: Cluster A Cluster B... Byte 1: 01110110 1 Byte 2: 10001000 0 Byte 3: 01010101 0 Byte 4: 00111101 1 Byte 5: 11001110 1 Byte 6: 01111011 0 Byte 7: 11110101 0 Byte 8: 10010110 0 ECC byte: 01000000 0 Divided up: Cluster A ECC-A Cluster B ECC-B Byte 1: 01110110 1 10100011 0 Resequenced into separate queues by byte in cluster: 01110110 11010001 10...... ...and distributed to the servers. These are just my ramblings, I'm not a programmer (or at least I haven't been for a long time). Nor do I claim to know if this form of distribution will escape the legal issues of storing certain data on on servers in specific areas of meatspace (I'm no lawyer (kill the lawyers)). At the very least, it seems that this scheme (or something like it, if this form of ECC is not sufficient) could be used to keep data from being lost if one or more servers gets whacked by armed forces or a nuclear bomb. I'm not even going to think about how this data could be distributed. You guys can do that... Feedback and flames welcome. John estoy(a)hotmail.com ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

3 2

http:--www.usdoj.gov-criminal-cybercrime-
by Jim Choate 17 Dec '03

17 Dec '03

Computer Crime and Intellectual Property Section (CCIPS) 202-514-1026 Fax 202-514-6113 The CCIPS is responsible for implementing the Justice Department's Computer Crime Initiative, a comprehensive program designed to address the growing global computer crime problem. Section attorneys are actively working with other government officials (e.g., the FBI, Department of Defense, NASA) the private sector (including hardware and software vendors and telecommunications companies), academic institutions, and foreign representatives to develop a global response to cyberattacks. These attorneys, who are responsible for resolving unique issues raised by emerging computer and telecommunications technologies, litigate cases, provide litigation support to other prosecutors, train federal law enforcement personnel, comment upon and propose legislation, and coordinate international efforts to combat computer crime. _________________________________________________________________ Information is available via this web site about the following topics: I. COMPUTER FRAUD AND ABUSE 1. The National Information Infrastructure Protection Act of 1996 II. SEARCHING AND SEIZING COMPUTERS 1. Federal Guidelines for Searching and Seizing Computers 2. Supplement to Federal Guidelines for Searching and Seizing Computers III. PROTECTING INTELLECTUAL PROPERTY RIGHTS : Copyrights, Trademarks and Trade Secrets 1. Federal Guidelines for Prosecution of Violations of Intellectual Property Rights 2. Operation "Counter Copy" 3. "No Electronic Theft ('NET') Act" 4. The Economic Espionage Act IV. ENCRYPTION AND COMPUTER CRIME 1. Letter from Attorney General Janet Reno and others to Members of Congress regarding law enforcement's concerns related to encryption 2. Testimony of Deputy Assistant Attorney General Robert S. Litt, Before the Subcommittee on Telecommunications, Trade and Consumer Protection, of the House Commerce Committee on September 4, 1997 V. INTERNATIONAL ASPECTS OF COMPUTER CRIME 1. Attorney General Janet Reno's Speech to Senior Experts Representing the G-7 on January 21, 1997 2. Council of Europe Recommendation 95(13) VI. LAW ENFORCEMENT COORDINATION FOR HIGH-TECH CRIMES 1. Computer-Telecommunications Coordinator ("CTC") Program VII. PRIVACY ISSUES IN THE HIGH-TECH CONTEXT 1. Law Enforcement Concerns Related to Computerized Data Bases Enforcing the Criminal Wiretap Statute Other Relevant Links _________________________________________________________________ I. COMPUTER FRAUD AND ABUSE _________________________________________________________________ A. The National Information Infrascructure Protection Act of 1996 In October 1996, the National Information Infrastructure Protection Act of 1996 was enacted as part of Public Law 104-294. It amended the Computer Fraud and Abuse Act, which is codified at 18 U.S.C. § 1030. Below you will find links to the amended version of 18 U.S.C. § 1030, as well as a legislative analysis, prepared by attorneys from the Computer Crime and Intellectual Property Section. * Legislative Analysis * 18 U.S.C. §1030 Amended B. Other Relevant Web Sites _________________________________________________________________ II. SEARCHING AND SEIZING COMPUTERS _________________________________________________________________ A. Federal Guidelines for Searching and Seizing Computers The process of Searching and Seizing Computers raises unique issues for law enforcement personnel. The Federal Guidelines for searching and seizing computers illustrate some of the ways in which search a computer is different from searching a desk, a file cabinet, or an automobile. * Introductory Remarks * FEDERAL GUIDELINES - Table of Contents * Download the Zipped WordPerfect file [138K]. B. Supplement to Federal Guidelines for Searching and Seizing Computers In October 1997, the Computer Crime and Intellectual Property Section published a Supplement to Federal Guidelines for Searching and Seizing Computers. This Supplement is intended to update the Federal Guidelines for Searching and Seizing Computers that had been published in July 1994. The Supplement describes relevant federal cases decided since July 1994 as well as a number of additional earlier decisions. The Supplement also describes relevant state cases, which had not been incorporated in the original Guidelines. The cases in this Supplement are organized according to the sections in the Guidelines. Supplement to Federal Guidelines for Searching and Seizing Computers Preface to Supplement to Federal Guidelines for Searching and Seizing Computers Supplement to Federal Guidelines for Searching and Seizing Computers - Table of Contents Download the Zipped WordPerfect 6.1 file [231k] C. Other Relevant Web Sites _________________________________________________________________ III. PROTECTING INTELLECTUAL PROPERTY RIGHTS : Copyrights, Trademarks and Trade Secrets _________________________________________________________________ A. Federal Guidelines for Prosecution of Violations of Intellectual Property Rights (Copyrights, Trademarks and Trade Secrets) The importance of the protection of intellectual property to the economic well-being and security of the United States cannot be overestimated. The Computer Crime and Intellectual Property Section wrote the attached manual to assist law enforcement in the investigation and prosecution of violations of federal criminal copyright, trademark, and trade secret laws. Section I of the manual contains an overview of the protection of intellectual property, and discusses the basic scope of copyright, trademark, and trade secret and patent law. Section II focuses on intellectual property entitled to copyright protection and Section III describes the applicability of various federal criminal statutes to copyright infringement. Section IV addresses the prosecution for trafficking in counterfeit goods under 18 U.S.C. § 2320. Section V discusses the prosecution of trade secret thefts and analyzes the recently enacted Economic Espionage Act of 1996. Finally, Section VI contains a list of contact persons, model indictments, search warrant affidavits, jury instructions, state criminal trade secret statutes, and the legislative history of the Copyright Felony Act and the Economic Espionage Act of 1996. * Table of Contents * Download the Manual Zipped WordPerfect file [###K]. B. Operation "Counter Copy" In early May, the Department of Justice and the Federal Bureau of Investigation released the first results of a nationwide law enforcement effort to crack down on trademark and copyright fraud, which is estimated to cost American businesses millions of dollars each year and cheat unsuspecting consumers who purchase counterfeit products. As a result of the joint effort, called Operation "Counter Copy," 35 indictments were returned since the beginning of April for copyright or trademark infringement. More information about Operation Counter Copy, including a press release and brief summaries of the cases, are available via the links below. * Summaries of Cases * FBI page - Counter Copy Cases * Press Release " C. No Electronic Theft ('NET') Act" Computers are changing the way that copyrighted goods are being illegally copied and distributed, creating new challenges for copyright owners and for law enforcement. * The Statement of Kevin V. DiGregrory, Deputy Assistant Attorney General of the Criminal Division before the Subcommittee on Courts and Intellectual Property of the House Committee on the Judiciary, presented September 11, 1997, describes how law enforcement is addressing this challenge and expresses the Department's support for the goals of H.R. 2265, The "No Electronic Theft ('NET') Act." A one page Summary of Statement is also available. D. The Economic Espionage Act The Computer Crime and Intellectual Property Section is also charged with evaluating all requests for approval of charges under the Economic Espionage Act and making a recommendation regarding the approval of such requests to the Attorney General, Deputy Attorney General, or Assistant Attorney General. In addition, the Section also prosecutes certain Economic Espionage cases directly. Four Pillars Case One well-publicized case currently being prosecuted by the Section involves the alleged theft of trade secrets by the Four Pillars Enterprise Company, LTD, of Taiwan from an American corporation. Press releases relating to that case can be found below. * Press Release: Taiwanese businessman and daughter arrested on industrial espionage charges (September 5, 1997) Press Release: Taiwanese firm, its President and his daughter indicted in industrial espionage case; Third individual charged in Ohio case (October 1, 1997) E. Other Relevant Web Sites _________________________________________________________________ IV. ENCRYPTION AND COMPUTER CRIME _________________________________________________________________ The nation's policy on encryption must carefully balance important competing interests. The Department of Justice has a vital stake in the country's encryption policy because encryption may be used not only to protect lawful data against unauthorized intruders, it may also be used to conceal illegitimate materials from law enforcement. While we support the spread of strong encryption, we believe that the widespread dissemination of unbreakable encryption without any accommodation for law enforcement access is a serious threat to public safety and to the integrity of America's commercial infrastructure. Our goal is to encourage the use of strong encryption to protect privacy and commerce, but in a way that preserves (without extending) law enforcement's ability to protect public safety and national security. Accordingly, the Administration has promoted the manufacture and use of key recovery products, aided the development of a global key management infrastructure ("KMI"), and liberalized United States restrictions on the export of robust cryptographic products. We anticipate that market forces will make key recovery products a de facto industry standard and thus preserve the balance of privacy and public safety that our Constitution embodies. A. Letter from Attorney General Janet Reno and others to Members of Congress regarding law enforcement's concerns related to encryption On July 18, 1997, Attorney General Janet Reno and others sent a letter to Members of Congress outlining law enforcement's concerns about the public safety and national security threats posed by unbridled availability of strong encryption. It urged legislators to support a balanced approach that supports commercial and privacy interest while maintaining law enforcement's ability to investigate and prosecute serious crime. This letter was co-signed by: * Louis Freeh, Director, Federal Bureau of Investigation * Barry McCaffrey, Director, Office of National Drug Control Policy * Thomas A. Constantine, Director, Drug Enforcement Administration, * Lewis C. Merletti, Director, United States Secret Service * Raymond W. Kelly, Undersecretary for Enforcement, U.S. Department of Treasury * George J. Weise, Commissioner, United States Customs Service * John W. Magaw, Director, Bureau of Alcohol, Tobacco and Firearms An image of the letter, as signed, as well as the text of the letter is available via the links below: * Image of letter to Congress regarding encryption as signed Text of letter to Congress regarding encryption as signed (WordPerfect) B. Testimony of Robert S. Litt, Deputy Assistant Attorney General, before the Subcommittee on Telecommunications, Trade and Consumer Protection, of the House Commerce Committee, on September 4, 1997 Robert S. Litt, Deputy Assistant Attorney General, Criminal Division, Department of Justice, testified before the Subcommittee on Telecommunications, Trade and Consumer Protection, of the House Commerce Committee, on September 4, 1997. His testimony addressed encryption and one of the bills proposing to modify the United States' regulation of cryptography, H.R. 695. His tesimony, and a summary of his testimony, is available via the link below. * Summary of Robert Litt's testimony before the Subcommittee on Telecommunications, Trade and Consumer Protection, of the House Commerce Committee, on September 4, 1997 Robert Litt's testimony before the Subcommittee on Telecommunications, Trade and Consumer Protection, of the House Commerce Committee, on September 4, 1997 C. Other Relevant Web Sites _________________________________________________________________ V. INTERNATIONAL ASPECTS OF COMPUTER CRIME _________________________________________________________________ With the explosive growth of the Internet worldwide, computer crimes increasingly are prone to have international dimensions. Some of the challenges faced by law enforcement on the international front include: harmonization of countries' criminal laws; locating and identifying perpetrators across borders; and securing electronic evidence of their crimes so that they may be brought to justice. Complex jurisdictional issues arise at each step. The Department of Justice is working with foreign governments through many channels to address global threats related to computer crime. A. Attorney General Janet Reno's speech to Senior Experts representing the G-7 on January 21, 1997 On January 21, 1997, Attorney General Janet Reno spoke to Senior Experts representing the G-7 group of leading industrialized nations (now, with the inclusion of Russia, known as The Eight). The Attorney General's speech addressed the challenges presented to law enforcement by hightech and computer criminals, and she suggested a number ways in which the United States and its allies can respond to this global threat. Her speech is available via the link below. * Janet Reno's speech to Senior Experts representing the G-7 on January 21, 1997 B. Council of Europe Recommendation 95(13) In September 1995, the Council of Europe adopted eighteen (18) recommendations relating to problems of criminal procedural law connected with information technology. These recommendations are available via the link below. * Council of Europe Recommendation 95(13) relating to problems of criminal procedural law connected with information technology, Sept. 1995 C. Other Relevant Web Sites _________________________________________________________________ VI. LAW ENFORCEMENT COORDINATION FOR HIGH-TECH CRIMES _________________________________________________________________ A. Computer-Telecommunications Coordinator ("CTC") Program Coordination among prosecutors in high-tech crime cases has improved dramatically because of the implementation, since January 1995, of the "Computer-Telecommunications Coordinator" ("CTC") program. Under the CTC program, each United States Attorney's Office, as well as a few other Department entities, has designated at least one Assistant U.S. Attorney to serve as a CTC, with a few distinct areas of responsibility. To reach a CTC, contact the Computer Crime and Intellectual Property Section, or the U.S. Attorney's office in a particular district. CTC responsibilities are outlined below. * CTC responsibilities B. Other Relevant Web Sites _________________________________________________________________ VII. PRIVACY ISSUES IN THE HIGH-TECH CONTEXT _________________________________________________________________ A. Law Enforcement Concerns Related to Computerized Data Bases The Computer Crime and Intellectual Property Section of the Department of Justice submitted comments in response to the request of the Federal Trade Commission ("FTC") for comments on its workshop on Consumer Information Privacy and its Data Base Study. The Department is deeply concerned about the safety and security of American citizens. The Department is vigilant to take appropriate measures to guard their privacy while using all the resources at its disposal, including information resources, to investigate and prosecute violations of the federal criminal law. The comments are available via the link below: * CCIPS comments as submitted to the FTC workshop on Consumer Information Privacy and Data Base Study B. Enforcing the Criminal Wiretap Statute The Computer Crime and Intellectual Property Section helps to protect the privacy of Americans by enforcing the criminal wiretap statute, 18 U.S.C.§ 2511. One well-publicized interception involved a conference call in which the Speaker of the House Newt Gingrich participated. The couple that intercepted the call pleaded guilty on April 25, 1997, as is described in the press release below. * Press release regarding guilty plea for interception of a communication C. Other Relevant Web Sites Go to . . . Criminal Home Pages || Justice Department Home Pages _________________________________________________________________ Updated page December 8, 1997 usdoj-jmd/irm/css/jea _________________________________________________________________

1 0

Financial Cryptography 1998 Press Announcement
by Robert Hettinga 17 Dec '03

17 Dec '03

Please pass this along to any member of the press you may know. Or anyone else you can think of. :-). Thanks, Robert Hettinga ----- For Immediate Release Press Contacts: Christopher D. Gerath Robert Hettinga Gerath & Associates, Inc. International Financial Cryptography Association (978) 264-4707 rah(a)shipwright.com chris(a)gerath.com Financial Cryptography '98 Conference & Exhibition to Highlight FC Technology and Use Second Annual Event is World's Leading FC Showcase Boston, MA, January 22, 1998 - The International Financial Cryptography Association (IFCA), today announced the 1998 Financial Cryptography Conference and Exhibition (FC98), to be held on February 23-27, 1998 on the island of Anguilla in the British West Indies. The FC98 Conference The International Conference on Financial Cryptography is the world's first and only peer-reviewed conference on financial cryptography. Every year, the newest research is presented in internet financial transfers, transaction clearing and network-based financial instruments. This year, invited speakers and panel participants include such industry experts as Dr. David Chaum, holder of several very basic financial cryptography patents and founder of DigiCash Corporation, and Dr. Ron Rivest, who invented the first practical public key cryptography system and founder of RSA Data Security, Inc. However, the primary focus of the Conference will be the results of financial cryptography research from experts at AT&T Labs, Bell Laboratories/Lucent, CyberCash, France Telecom, JavaSoft, Kyushu University, IBM T.J. Watson Research Center, Microsoft, MIT, Princeton University, Queensland University, University of Southern California, The US Naval Research Laboratory, Valicert, Verisign and others. Last year's Conference, FC97, was the subject of an article in the July, 1997 issue of Wired Magazine, an NHK-Japan television program, and was covered by the Financial Times, the New York Times, and Institutional Investor. Financial cryptography was also the cover story of the Setember 8, 1997 issue of Forbes Magazine. "Everyone knows business on the Internet is growing, but financial cryptography and the vanishing cost of individual electronic transactions will create entirely new forms of business," said Robert Hettinga, IFCA founder and FC98 General Chairman. "Simple examples include the possible replacement of many forms of book-entry financial settlement with digital bearer versions, and, of course, cash settled electronic auctions for anything you can send down a wire," Hettinga continued. The FC98 Conference Proceedings will be available later in the year from Springer Verlag as part of the Lecture Notes in Computer Science series. See the selection of papers for the FC98 conference at <http://www.cwi.nl/conferences/FC98>. The FC98 Exhibition The FC98 Exhibition, which runs concurrently with the Conference, serves as a showcase for the newest financial cryptography products. The presentations, demonstrations, and panels of FC98 Exhibition Program will explain what kinds of financial cryptography services and implementations are available in the market today, while the Exhibition floor will have booths from many of the top companies using and selling financial cryptography today. The FC98 Workshop for IT professionals and Senior Managers The Financial Cryptography '98 Conference and Exhibition will be followed by the FC98 Workshop for Senior Managers and IS Professionals, which will be held the week following the Conference and Exhibition, from March 2-6, 1998, at the same location. The intensive 40-hour FC98 Workshop gives senior managers and IT professionals an understanding of the fundamentals of strong cryptography as applied to financial operations on public networks, along with hands-on instruction in the integration and implementation of these technologies. FC98's Affiliations and Sponsorship Financial Cryptography '98 is held in cooperation with the International Association for Cryptologic Research. Sponsoring organizations include RSA Data Security Inc., <http://www.rsa.com/>; C2NET, Inc., <http://www.c2.net/>; Hansa Bank & Trust Company Limited, Anguilla, <http://www.hansa.net/>; Sicherheit und Privat- International Bank; Offshore Information Services, <http://www.offshore.com.ai/>; and Shipwright Development Corporation, <http://www.shipwright.com/>. The FC98 Organizing Committee consists of: Vincent Cate and Robert Hettinga, General Chairs; Rafael Hirschfeld, Conference Chair; Matthew Franklin, Conference Co-Chair; Ian Goldberg, Workshop Leader; Lynwood Bell, Exhibition Steering Committee Chair; and Blanc Weber, Exhibits and Sponsorship Manager. Registration and Travel Registration for FC98 can be done directly on the Internet at <http://www.fc98.ai/>, by calling (264) 497-3255, faxing (264) 497-2756, email with PGP encryption to <mailto:vince@offshore.com.ai> or physically mailing the registration form to 949 Old Ta, The Valley, Anguilla, BWI. Admission to the Exhibition and Conference requires advance payment of the $1,000 admission fee. If you're interested in Exhibition space or becoming an event sponsor, please email Blanc Weber, <mailto:blancw@cnw.com>. Air travel to Anguilla is typically done through San Juan or St. Martin. There are several non-stop flights a day from various European and US locations. Connection through to Anguilla can be made through American Eagle, through LIAT, or in the case of St. Martin, with a short ferry ride to Anguilla. Consult a travel agent for details or visit our web page at <http://www.fc98.ai/>. ### Service marks, trademarks or registered trademarks are property of their respective owners. ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

Re: Killing An Arab (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Hi David, Forwarded message: > Date: Fri, 23 Jan 1998 00:38:08 -0500 > From: David Miller <dm0(a)avana.net> > Subject: Re: Killing An Arab > > 1 : a theory that there are no universal essences in reality and that > > the mind can frame > > no single concept or image corresponding to any universal or general > > term > > 2 : the theory that only individuals and no abstract entities (as > > essences, classes, or > > propositions) exist -- compare ESSENTIALISM, REALISM Both of these are what they purport to prohibit. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Sacremento Sheriff's deputies get M-16's
by Jonathan Wienke 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On the news tonight, channel 3 and 31 both featured stories about Sacramento sheriff deputy supervisors getting "semi-automatic AR-15" rifles. It was hilarious. Channel 3 showed a close-up of the receiver, which was clearly marked with "M16A1". I got this funny feeling that them thar AR-15's will rock 'n roll if the deputy supervisor finds himself in a North Hollywood style situation...can you say Disinformation, boys and girls? -----BEGIN PGP SIGNATURE----- Version: PGP for Business Security 5.5 iQA/AwUBNMg/88JF0kXqpw3MEQIAigCg/bXFrIS02GRZW65e10uZrh8QGSEAoLv2 2xmcXhKUBvrWN1Lm7CtE1PhQ =P5v5 -----END PGP SIGNATURE----- Jonathan Wienke PGP Key Fingerprints: 7484 2FB7 7588 ACD1 3A8F 778A 7407 2928 3312 6597 8258 9A9E D9FA 4878 C245 D245 EAA7 0DCC "If ye love wealth greater than liberty, the tranquility of servitude greater than the animating contest for freedom, go home from us in peace. We seek not your counsel, nor your arms. Crouch down and lick the hand that feeds you. May your chains set lightly upon you; and may posterity forget that ye were our countrymen." -- Samuel Adams "Stupidity is the one arena of of human achievement where most people fulfill their potential." -- Jonathan Wienke Never sign a contract that contains the phrase "first-born child." When the government fears the people there is liberty. When the people fear the government there is tyranny. Those who live by the sword get shot by those who don't. RSA export-o-matic: print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

Announcement: RPK InvisiMail released on 12 Jan, 1998
by RPK New Zealand Ltd 17 Dec '03

17 Dec '03

You have received this message because at some time during the past two years you have requested to be put on the RPK New Zealand Ltd. company mailing list. (We're the Fast Public Key Encryption company). If you wish to be removed from the list, please forward this message to remove(a)rpkusa.com -------------------------------- RPK New Zealand Ltd. in a joint venture with Virtually Online Ltd. has released RPK InvisiMail, a standards-based e-mail security application for use with Internet mail software (SMTP/POP3). The product offers the strongest encryption available anywhere in the world. Since it was built outside the United States, it is also available all over the world with strong encryption. RPK InvisiMail is also the easiest product of its type to setup and use which makes it quite unique. You can learn more about this product by reading the press release below or by visiting the web site at www.InvisiMail.com. We are also offering FREE downloads of the RPK InvisiMail Intro product. Please give it a try and pass it along to anyone you like. -------------------------------- For Immediate Release Contact: Sal Cataldi, Cataldi PR +1 212.941.9464, scataldi(a)earthlink.net, www.InvisiMail.com RPK InvisiMail(tm), secure Internet e-mail with globally available strong encryption for Microsoft, Netscape platforms SAN FRANCISCO, Jan. 12, 1998 - InvisiMail Ltd (www.InvisiMail.com) announced today immediate worldwide availability of RPK(tm) InvisiMail(tm), a standards-based e-mail security add-in for Microsoft, Netscape and other POP3/SMTP Internet e-mail clients and gateway servers. Tested and certified by the International Computer Security Association (www.ncsa.com) RPK InvisiMail automatically and transparently encrypts e-mail messages and attachments, authenticates the sender and verifies the contents of each message have not been changed in transit. RPK InvisiMail is globally available with high strength encryption. InvisiMail and the underlying RPK encryption algorithm were developed outside the United States. Therefore, InvisiMail is not subject to restrictive U.S. export policies. RPK InvisiMail is as easy to set up and use as anti-virus software, and just as important. While Microsoft and Netscape battle each other with incompatible and difficult to use security offerings, InvisiMail seamlessly integrates with ALL popular POP3/SMTP e-mail products including Netscape, Microsoft, Eudora, Pegasus, Calypso -- more than any other solution available today -- making it the preferred e-mail security product for multi-platform use, worldwide. All InvisiMail users can send the FREE InvisiMail Intro version to anyone worldwide, providing compatibility without requiring others to purchase anything, making InvisiMail unique among e-mail security offerings. "Most people don't realize that their e-mail can be forged, altered or read by anyone, any time, without any evidence," said Jack Oswald, President and CEO of RPK Ltd. "Without products like RPK InvisiMail, communications on the Internet are untrustworthy." InvisiMail uses the RPK Fast Public Key Encryptonite(tm) Engine, the strongest cryptography available worldwide today. RPK is dramatically faster than the well-known RSA algorithm, yet just as secure. RPK has been analyzed by world class cryptographers who have issued reports on the security and integrity of the technology. "InvisiMail is the easiest, fastest, most transparent e-mail security product I have seen," said Kevin Shannon, President of net*Gain, a specialist in launching Internet companies. "This is the product we've all been waiting for." As part of its official launch, InvisiMail Professional is available FREE to all New Zealand residents for ninety days. RPK InvisiMail is available in two desktop versions: Intro (FREE) and Professional (introductory price $29.95). RPK InvisiMail Enterprise Gateway Server will be available Q2 1998. InvisiMail can be downloaded from: www.InvisiMail.com. All trademarks and registered trademarks are those of their respective companies. ***

1 0

Surprisingly fast PGP5.5(i) scanning and proofreading
by Anonymous 17 Dec '03

17 Dec '03

From: ica(a)hawking.fokus.gmd.de (Ingmar Camphausen) Newsgroups: de.comp.security,alt.security.pgp,comp.security.pgp.discuss Subject: Surprisingly fast PGP5.5(i) scanning and proofreading Message-ID: <6aaf44$id8(a)stern.fokus.gmd.de> I am probably not the only one surprised how "out of a sudden" the 5.5 version of PGP was scanned and proofread by Stale Schumacher alone (as it seemed to me). Hence I asked him and Teun Nijssen (they, according to the README in the PGPsdk 5.5 distribution on www.pgpi.com, did all the work) how come they were so much faster and there wasn't a coordinated "distributed" proofreading as with the "international" version of PGP5.0. Teun took the time for a detailed answer and was so kind to permit its free distribution; so here is what he wrote in reply to my request: ---8<--snip-------------------------------------------------------- Hello Ingmar, there are no secrets in this reply; you may do with it whatever you like. /I was somewhat surprised how suddenly and fast PGP5.5(i) was scanned *and* /proofread. Thank you. /Having participated in the proofreading of the 5.0i version and with the /amount of time spent by the "correctors" all over the world in mind, I had /the impression that 5.5 was there and proofread like "a bolt out of the /blue"! It took roughly 100 hours of stamina, between Christmas and 5 January to scan the complete 5.5 books and to correct the 5000 pages of the PGPsdk and Win version. Scanning was no longer an issue, as we had now an Automatic Document Feeder for the HP Scanjet 4C at our disposal. This ADF has been the hero of the two weeks: actually it did not scan 7500 pages ("tools" book + 5.5) but about 10.000 pages, since an initial set of about 3000 pages was discarded when the OCR quality proved not optimal yet. This wonderful ADF misfed exactly zero pages on all this effort. It can contain 50 pages input, so 10.000 pages require 200 manual interventions 30 minutes separated from each other (the HP Scanjet 4C combined with Omnipage Pro takes a little bit less than 30 seconds per page). One Pentium did nothing but scanning, several days starting at 9:00 and finishing around 23:00. The reason that correction went so much better than on either of the two editions of PGP 5.0 was in the new format of the books. The fonts are now excellent, including visible 'tab' characters (kind of triangles), visible spaces (if more than one space is used somewhere, the second one is printed as a tiny black triangle) and a special 'underscore' with little curls. This new book format is supported by a truely marvelous new 'repair' utility, that obviously was optimized to correct the results that come from using an Omnipage version HP Scanjet 4c: the intro of the book "Tools for Publishing Source Code via OCR" describe setting-up the OCR on a Mac/Omnipage/HP 4c. Anyway, repairing 100 pages now takes 4 hours worst case (if very many visible spaces are used: Omnipage often mis-counts multiple visible spaces). And best case: 100 pages can be repaired in half an hour. That is twice the speed of scanning. The true horror of PGP 5.0 was the BINARIES.ZIP file. It was done within 8 hours for 5.5 Windows. The trick was simply to manually delete any page that contained any error. Then run the 'sortpage' utility to report what was missing and *re-scan* those pages. In this way it went from 217 pages to 30 and then to only 6 pages that needed real correction, because at the margin of these pages some lines had not got enough black ink from the book print process. /Did you get any special ...emmmm...support? very definitely not! Neither would we have accepted it should it have been available. It was not available. We think this game should be played "by the book" (sic). The books were simply an order of magnitude better. I think that someone at PGP Inc really tested scanning this time, before printing. Now if they print a next bookset, let's hope they pretty-print everything, discarding trailing visible whitespace and replacing initial spaces by tabs on all lines... /Or did I just miss a "call for volunteers" etc. like the one that /preceeded the release of PGP5.0i? Nope, there was no call this time, because Stale and me could do it alone. /I am very interested in a satisfying answer to this question, for it is /closely related to the credibility of the international PGP website and /the new software version. I agree with that objective. That is the reason that I wrote this answer as extensively as I did and why I permit you to publish it as widely as you like. cheers, teun Senior Project Manager Computer Centre Tilburg University ------------------------------------------>8----snip------------- The original reply was PGP-signed by Teun; it should be available via http://www.in-berlin.de/User/aurora/teun_pgp55-ocr.txt from today, ~ 7pm UTC (GMT) on. Ingmar -- Ingmar Camphausen camphausen(a)fokus.gmd.de PGP key on server GMD FOKUS = Research Institute for Open Communication Systems

1 0

Re: FCPUNX:Revenge on the Nerds -Maureen on a rampage
by Eli Brandt 17 Dec '03

17 Dec '03

Igor Chudov @ home writes: > I suggest writing a proxy server that does such filtering, running it on > the local machine, and using it as proxy server from your netscape browser. "The Internet Junkbuster Proxy(TM) gets rid of stuff you don't want while surfing the Web, such as banner ads and cookies. It's free." http://www.junkbusters.com/ht/en/ijb.html -- Eli Brandt | eli+(a)cs.cmu.edu | http://www.cs.cmu.edu/~eli/

1 0

sleep writing? (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Hi David, Forwarded message: > >Consequently, a contradiction emerges between the universality of intellectual labor (the search for > >universal truth and the good of all) and the particularity of the interests served. The intellectual > middle rival? devil rim lad? This is too weird. I believe the entire problem rests in that concept 'universal truth', again a veiled reference to a theism of some sort or another, a fundamental transcendance. > That reminds me. When I was in Austin, I did notice that they had quite an incredible amount of > public access TV. We spend quite a bit of money on it that is for shure. I believe we have like 5 or 6 channels currently. I worked on a program for access television a few years ago doing post production, video processing, and audio sweetening. It was a soap opera that we filmed in a local retirement home and even won an award at some contest in England. It was called 'Silver Time'. The cool thing is that anyone can go down and by taking a couple of 4 hour classes put their own show on. Because I know the person who does their technical support via contract through one of my customers (CVS) they'll let me go in and play around for free. They have some quite professional equipment, Raptors and several non-linear editing decks as well as a bunch of Amiga Video Toasters and such. That experience is one of the reasons I ended getting my own Toaster. The hard drive of which failed and I have spend the last few evenings, between answering your traffic, rebuilding. It finaly came back online yesterday and I think I've just about got it all rebuilt software wise. One of the local Austin Cypherpunks works on a variety of shows down there and occassionaly puts on his own video game review production. We had hoped to do a 30 minute 'state of crypto today' show but we never could get the momentum going. Jim

1 0

Test [No reply please]
by Jim Choate 17 Dec '03

17 Dec '03

Test No reply please ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Misty???
by John Young 17 Dec '03

17 Dec '03

One version of MISTY appeared a couple of years ago, and it was discussed on cpunks then. Mitsubishi has had brief descriptions of it since then as the algorithm used on its LSI chip. Here are two almost identical Melco blurbs which describe the features of MISTY1 and MYSTY2: http://www.melco.co.jp/rd_home/map/j_s/topics/new/misty_e.html http://www.mitsubishi.com/ghp_japan/TechShowcase/Text/tsText06.html Note that these undated sites promise to publicize the algorithm and state that public testing of algorithms is a means of assuring their strength. Matsui, one of its authors, is a highly respected cryptographer and he's a regular participant in international crypto conferences. His articles on the ciphers underlying MISTY are listed in the IETF draft for it: http://jya.com/misty1.htm For those who wish to see the 25 draft encryption algorithms submitted to IETF in 1997 (MISTY1 the last) see a list at: http://jya.com/ietf-dea-97.htm

1 0

PGP SDK integrated into Communicator 5.x Mail?
by Jim Burnes 17 Dec '03

17 Dec '03

OK: I'm sure I'm not the first one to think of this one. With Communicator 5.x source code being free, how long will it take for someone to integrate it with PGP SDK (and mixmaster and nym.alias.net nyms for that matter?) Whew! jim -- "How do you explain school to higher intelligence?" Elliot to his brother in ET

1 0

Thank you for registering at Disney.com
by guest_mail＠online.disney.com 17 Dec '03

17 Dec '03

Welcome, and thank you for registering at Disney.com, the best place to find out what's new at Disney! From now on, all you'll need to enter our contests and sweepstakes are your parent or guardian's permission -- and your Disney.com Registration Name and Password. We suggest you make a note of these names so you don't forget them. If you do forget them, you can use your special, easy-to-remember Disney.com "code word" to find them again. Just to make sure our records are correct, please take a look at the information you gave us: Your first name: cypherpunks Your last name: cypherpunks Your e-mail address: cypherpunks(a)algebra.com Your parent's e-mail address: cypherpunks(a)algebra.com The year of your birth: 1990 Your Registration Name: cypherpunks We're sending your parent or guardian an e-mail message just to let them know you've registered with us. Any prizes you win at Disney.com will be awarded to them on your behalf, so they should know you registered. There's a whole world of Disney at your fingertips, so have fun! -- Your friends at Disney.com (c) Disney

1 0