December 2003 - cypherpunks-legacy

Technology center
by John Smith 17 Dec '03

17 Dec '03

One of the parts that got added to the SAFE bill is this new Technology center. It is supposed to help the FBI when they run into encryption. We all know that's not going to work. Not very well anyway. Maybe if it's some bogus encryption like the SMIME that has a new crack program out for it, they'll get through it. But if it is real crypto then there's no way the Technology center is going to be cracking keys. What I think they'll do is work on virus software. They can write something which will hack the crypto on your PC and make it weak. If they want to wiretap some drug dealer, they get him to download one of their programs somehow. Maybe they've got a Java bug which lets them hack files when he goes to a certain web page. Or maybe they get him to download some free demo of a game or interaction service (hotchicks.com) Whatever, the program actually looks for PGP and other crypto software and hacks it. Now the FBI can read his stuff. This is probably even legal. If they could break into his house and stick a bug in his computer, why can't they do the same thing electronically. They might even want to set things up ahead of time so that crypto software gets hacked for everyone. They won't look, see, unless they get a judge to OK it. But they get some utility that everybody uses like realaudio or winzip, and they convince the author to put in their hack. Now everybody who uses this has their crypto broken. The FBI promises not to do any decryption without a warrant, so they haven't actually stolen anyone's privacy. Maybe they could even set it up so that it was only broken for the FBI, that anybody else wouldn't be able to read it. Do you think would try this? What would you do if you were an a**hole and ran the Technology center? "John ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

Re: Chutzpah! FBI Calls Privacy Extremists Elitist
by Jay Holovacs 17 Dec '03

17 Dec '03

At 11:54 PM 9/25/97 -0400, David HM Spector wrote: > >The absolute positions "handcuffed" law enforcement while also raising >rights for citizens to levels that were unreasonable and that would >have been foreign to the nation's founding fathers. Extreme privacy >positions were ultimately elitist and nondemocratic in that they >presumed the views of a knowing privacy cognoscenti should pre-empt >the views of the nation's elected officials and the Supreme Court, >McDonald said. Elected officials? FBI and NSA lifers are about as far as possible from accountable elected officials. (And the whole point to elected officials is that they can be influenced by the constituents) I was told by a House staffer (a relative) that within the FBI many of the agents resent Freeh, they feel he is giving away the store (!!!) because of some policies he supposedly has taken to prevent another JE Hoover (though I can hardly imagine what). Anyhow this staffer said, he would really worry about such gung-ho agents having access to private communications. > Jay

1 0

Re: In response to Declan's questions about crypto.com
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Jonah Seiger didn't have any better sense than to write: > We also recognize the realities of politics. No matter how much any of us > might wish it to be true, members of the Commerce Committee were not > willing to stand up and simply oppose everything. It was not in the > cards. White and Markey offered them a chance to defeat Oxley while > throwing a small bone to law enforcement. We believe that passage of SAFE > with the White-Markey amendment, despite the problems with the criminal > provisions, is on balance, a step forward in the fight for encryption > policy reform. ARE YOU FUCKING CRAZY!!!!????!!!!???? Do you remember the NRA? You know, the organization that used to refuse to compromise on defending the Constitution? Well, they decided to play DC's game, and now they are nothing more than a bunch of lame fucks who spend their time trying to explain to their dwindling membership that people with half-a-brain and a modicum of common sense need to give up their right to self-defense so that brainless retards won't get murdered with their own guns. Louis Freeh wants cryptographers' nuts and the CDT wants to tell us that giving him *one* nut is "a step forward." NEWS FLASH FOR THE LAME FUCKS AT CDT!!!! The Constitution and the Bill of Rights *do*not* end with the words: "...just kidding!" "...unless it's too much trouble." "...except for drug dealers, pedophiles, pornographers and terrorists." "...except for niggers, spics, wops and kikes." "...except for women." "...except for communists." "...except for Dr. Dimitri Vulis, KOTM." "...unless the 'legitimate needs of law enforcement' necessitate the abandonment and/or abrogation of all basic human rights." "...up until the time comes when people purporting to defend basic human rights guaranteed under the Constitution decide to support the compromise of the rights of others." > That's why we have described the vote on cryto.com as a "vote in favor of > privacy". I do not expect that this will convince all of our detractors, > but I do hope this clarifies the substance of Declan's criticism. Declan's criticism does not *need* clarifying. What needs clarifying is how CDT and it's bum-buddy organizations can possibly claim to justify the turning of 'rights' into 'privleges' which can then be revoked by those who claim to 'grant' them. Is CDT going to desribe the vote for the law allowing the citizens of the US to take 'reasonable' breathes of air as "a vote in favor of breathing?" Do us all a favor and stand next to the lawyers so that Shakespeare doesn't have to waste bullets when people of reason get tired of letting the lame fucks rule the planet. Toto (posting anonymously) > As always, I am happy to respond to queries about CDT's positions and > tactics, but I am not interested in engaging in public flame throwing. > > Best, > > Jonah > > * Value Your Privacy? The Government Doesn't. Say 'No' to Key Escrow! * > Adopt Your Legislator - http://www.crypto.com/adopt > > -- > Jonah Seiger, Communications Director (v) +1.202.637.9800 > Center for Democracy and Technology pager +1.202.859.2151 > <jseiger(a)cdt.org> > PGP Key via finger > http://www.cdt.org > http://www.cdt.org/homes/jseiger

1 0

OpenPGP approved for standards track by IETF
by Damaged Justice 17 Dec '03

17 Dec '03

-- forwarded message -- Path: wmich-news!gumby!newspump.wustl.edu!rice!bcm.tmc.edu!news.msfc.nasa.gov!newsfeed.internetmci.com!204.238.120.130!jump.net!grunt.dejanews.com!not-for-mail Date: Fri, 26 Sep 1997 13:51:52 -0600 From: nospam(a)synernet.com Subject: OPEN-PGP" APPROVED FOR STANDARDS TRACK BY IETF Newsgroups: alt.security.pgp,comp.security.pgp.discuss,alt.security,talk.politics.crypto,alt.privacy,alt.privacy.anon-server Message-ID: <875299757.20568(a)dejanews.com> Reply-To: nospam(a)synernet.com Organization: Deja News USENET Posting Service X-Article-Creation-Date: Fri Sep 26 18:49:17 1997 GMT X-Originating-IP-Addr: 166.82.194.182 (estone.vnet.net) X-Http-User-Agent: Mozilla/3.0 (Win95; U) X-Authenticated-Sender: nospam(a)synernet.com Lines: 99 Xref: wmich-news comp.security.pgp.discuss:5111 "OPEN-PGP" APPROVED FOR STANDARDS TRACK BY INTERNET ENGINEERING TASK FORCE Working Group formed to pave worldwide protocol for secure communication SAN MATEO, Calif. (Sept. 25, 1997) -- In a milestone decision for the standardization of secure electronic communications worldwide, the Internet Engineering Steering Group today unanimously approved the formation of an official IETF (Internet Engineering Task Force) Working Group to develop a secure email specification called "Open-PGP." The proposed Open-PGP standard will build on Pretty Good Privacy, Inc.'s (PGP) encryption technology, which already is used by millions of individuals around the globe. To facilitate an international standard and promote growth of the Internet, as well as related industries worldwide, PGP released change-control of its technology to the Internet Society (ISOC), and the Internet Engineering Steering Group (IESG). "As the IETF Security Area Director, I'm very pleased that PGP Inc. yielded change control to the standards body," said Dr. Jeff Schiller, manager of Computer Services at MIT. "MIT has been a proponent of PGP from the very start -- in 1991, MIT distributed the first non-commercial version of PGP for free, and since then, has been hosting the public key (certificate) server for worldwide access," he said. Phil Dunkelberger, president of PGP, said, "This development is in keeping with PGP's commitment to protecting security of business and personal communications, and our founding principal of the universal right to privacy. We've never been interested in industry domination at the expense of the users." According to Charles Breed, director of security technology, PGP, and co-chair of the IETF Working Group, "Despite the industry's reputation for aggressive competition, there was unilateral support when Open-PGP was first proposed at the Munich IETF meeting a month ago. More than 150 people representing US companies were present, as well as businesses from Singapore, Japan, the UK and Europe." "Open-PGP" will tackle a major obstacle to the growth of the Internet, plagued at present by policy and technical incompatibilities from country to country. The proposed standard is an unencumbered, non-proprietary specification that will guarantee interoperability of encrypted and digitally signed messages, and provide strong encryption and non-repudiation with digital signatures. Open-PGP will be developed by a consortium of experts, using technology that has provided privacy to Internet email and electronic files since 1991 in products from more than 80 manufacturers worldwide. The Open-PGP specification will be available for peer and public review as it develops. Alternative proposals that have failed in the past, such as PEM (Privacy Enhanced Mail), MOSS (MIME object Security Systems) and most recently, S/MIME (Secure MIME from RSA), depended on complex infrastructures or were encumbered by legal patents, royalties, and export restrictions forcing the use of weak encryption practices. "I expect the Open-PGP specification will progress quickly, because it's well understood, simple and our mailing list on the topic suggests it has a great deal of vendor support already. It has all the elements for a comprehensive solution: trust models, certificate infrastructure, encoding rules, securing MIME and the cryptographic algorithms," said Paul Hoffman, director of the Internet Mail Consortium (IMC), a non-profit organization that promotes the growth of Internet protocols. "Open-PGP applications will be easy for corporations and individuals to use, and will be based on strong, freely available, well-known cryptographic techniques that are the foundation of PGP's technology," said John Noerenberg, senior development manager at Qualcomm's Eudora Division. "Eudora is the top-selling Internet mail application and our users are very pleased with the PGP-based security component." For more information about Open-PGP or subscribe to the IMC mail list, visit the IMC worldwide web site at http://www.ietf-open-pgp.imc.org. About PGP San Mateo-based, Pretty Good Privacy, Inc. (PGP), is the pioneer and worldwide de facto standard for business security and personal privacy, with an estimated four million users of its encryption products, including more than half of the Fortune 100 companies. PGP is committed to providing the most advanced security products for the digital age, safeguarding the communication and storage of information. For more information, visit our website at http://www.pgp.com. Contact: Robin Rootenberg/Monika Madrid Access Communications 1-800-393-7737 ext. 282/227 rrootenberg@accesspr.com/mmadrid@accesspr.com" -- ---------------------------- Ed Stone estone(a)synernet-robin.com remove "-birdname" spam avoider ---------------------------- -------------------==== Posted via Deja News ====----------------------- http://www.dejanews.com/ Search, Read, Post to Usenet -- end of forwarded message --

1 0

We're in BIG trouble now! / Re: CDT complains to my editors after post to cypherpunks
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

The Graham-John Bullers autobot wrote: > On Fri, 26 Sep 1997, Dr.Dimitri Vulis KOTM wrote: > Declan is smart. > > I think Vulis needs each of us to send ten copies of this back to him. > > Do you understand why now. Shit! The Graham-John Bullers autobot has learned how to think in a rudimentary fashion that allows it to respond to posts in a manner that comes close to imitating rational thought. How long, I ask you, until it decides to run for President? Igor (posting anonymously)

2 1

EPIC Alert 4.13 on crypto and more
by Declan McCullagh 17 Dec '03

17 Dec '03

Note this excerpt on the problems of Markey-White: >While surviving the draconian Oxley-Manton amendment, the SAFE bill, >originally introduced by Rep. Bob Goodlatte (R-VA) to relax U.S. >export controls on encryption products, did not emerge from the >Commerce Committee unscathed. The committee adopted an amendment >offered by Reps. Ed Markey (D-MA) and Rick White (R-WA) that would >create a new National Electronic Technologies (NET) Center within the >Justice Department. The NET Center would engage in research and >"examine encryption techniques and methods to facilitate the ability >of law enforcement to gain efficient access to plaintext of >communications and electronic information." The NET Center would be >authorized to seek the assistance of "any department or agency of the >Federal Government" in support of its mission, thereby providing >explicit statutory authority for National Security Agency involvement >in domestic law enforcement activities. The Markey-White amendment >also doubles the penalty for the use of encryption in furtherance of a >felony and provides that "No person shall be subject to civil or >criminal liability for providing access to the plaintext of encrypted >communications or electronic information to any law enforcement >official or authorized government entity, pursuant to judicial >process." Question to ponder for the weekend: if it took this kind of "compromise" for a bill to clear the unabashedly pro-business Commerce committee, what will it take for a bill to become law? -Declan ---------- Forwarded message ---------- Date: Fri, 26 Sep 1997 17:33:43 -0400 From: Electronic Privacy Info Center <info(a)epic.org> To: List <info(a)epic.org> Subject: EPIC Alert 4.13 ============================================================== @@@@ @@@@ @@@ @@@@ @ @ @@@@ @@@@ @@@@@ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @@@ @ @ @@@@@ @ @@@ @@@ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @ @@@ @@@@ @ @ @@@@ @@@@ @ @ @ ============================================================== Volume 4.13 September 26, 1997 -------------------------------------------------------------- Published by the Electronic Privacy Information Center (EPIC) Washington, D.C. http://www.epic.org/ ======================================================================= Table of Contents ======================================================================= [1] House Committee Rejects Domestic Crypto Ban [2] HHS Releases Medical Privacy Recommendations [3] Employment Eligibility Pilot Programs Begin [4] White House Commission Urges Scrutiny of Private Employees [5] ID Cards to Cost $10 Billion [6] Imagine: FBI Finally Releases John Lennon Files [7] New Bills in Congress [8] Upcoming Conferences and Events ======================================================================= [1] House Committee Rejects Domestic Crypto Ban ======================================================================= The House Commerce Committee has rejected an FBI-backed proposal to impose the first-ever domestic controls on encryption. In a 35-16 vote on September 24, the committee defeated an amendment to the SAFE crypto bill offered by Reps. Michael Oxley (R-OH) and Thomas Manton (D-NY) that would have banned the domestic manufacture and sale of encryption products that do not provide law enforcement agencies easy access to encrypted information. Speaking in opposition to the amendment, many committee members cited the unprecedented assault on privacy and civil liberties that would result if the FBI proposal was adopted. While surviving the draconian Oxley-Manton amendment, the SAFE bill, originally introduced by Rep. Bob Goodlatte (R-VA) to relax U.S. export controls on encryption products, did not emerge from the Commerce Committee unscathed. The committee adopted an amendment offered by Reps. Ed Markey (D-MA) and Rick White (R-WA) that would create a new National Electronic Technologies (NET) Center within the Justice Department. The NET Center would engage in research and "examine encryption techniques and methods to facilitate the ability of law enforcement to gain efficient access to plaintext of communications and electronic information." The NET Center would be authorized to seek the assistance of "any department or agency of the Federal Government" in support of its mission, thereby providing explicit statutory authority for National Security Agency involvement in domestic law enforcement activities. The Markey-White amendment also doubles the penalty for the use of encryption in furtherance of a felony and provides that "No person shall be subject to civil or criminal liability for providing access to the plaintext of encrypted communications or electronic information to any law enforcement official or authorized government entity, pursuant to judicial process." In a letter sent to the Commerce Committee prior to the vote, EPIC joined with the American Civil Liberties Union, Eagle Forum, Americans for Tax Reform and other groups in urging members to oppose "any proposal establishing a legal structure for key recovery even if temporarily 'voluntary,' any so-called 'compromise' provision drawn from Oxley-Manton . . . , and any new proposal that would limit the availability and use of strong encryption." The fate of the SAFE bill is now uncertain. The original Goodlatte language has been substantially amended by five House committees, with contradictory results. Rep. Gerald Solomon (R-NY), chairman of the House Rules Committee, has indicated that he will not send the legislation to the House floor unless it contains the Oxley-Manton domestic controls. As such, SAFE may no longer be a viable vehicle for the reform of encryption policy that it was originally intended to promote. PDF versions of House Commerce Committee documents on the SAFE bill are available at: http://www.house.gov/commerce/full/092497/markup.htm ======================================================================= [2] HHS Releases Medical Privacy Recommendations ======================================================================= Health and Human Services (HHS) Secretary Donna Shalala released the Department's recommendations for a new medical privacy bill on September 11, calling for legislation that would generally protect all medical records. In addition, HHS says medical records should not be used by employers and others for making non-medical decisions; patients would have the right to sue if their records were disclosed improperly and criminal and civil penalties could be imposed. On a number of issues, the guidelines fall short. HHS recommends that there be no new laws preventing law enforcement access to medical records, essentially enabling law enforcement and other government officials to obtain medical records without a court order. In addition, on the issue of medical research, the guidelines recommend that personally identifiable records be used for medical research without the consent of the patient. They also ignore the issue of whether a single unique identifier such as a Social Security number should be used to link all medical records in a nationwide network of records. Importantly, HHS recommends that any new medical privacy law should not preempt already existing state or federal laws that provide greater protection. A major bill introduced last year by Sen. Robert Bennett (R-UT) would have prevented states from providing more protection to their citizens. Many states have enacted laws giving stronger privacy protection to records on substance abuse, AIDS and mental health. Some states, such as Massachusetts, are currently in the process of enacting comprehensive privacy legislation. The text of the HHS recommendations and more information on medical privacy is available at: http://www.epic.org/privacy/medical/ ======================================================================= [3] Employment Eligibility Pilot Programs Begin ======================================================================= The Immigration and Naturalization Service (INS) and the Social Security Administration (SSA) have announced three pilot programs for verifying eligibility of employees to work within the United States. The pilot programs were ordered by the Congress as part of the Immigration Reform and Immigrant Responsibility Act of 1996 in a compromise attempt to avoid creation of a national identification system. The three programs are the Basic Pilot; the Citizen Attestation Pilot; and the Machine-Readable Document Pilot. The Basic Pilot requires that employers verify the employment eligibility of all new employees through automated verification checks of SSA and INS databases using a telephone. The Citizen Attestation Pilot only checks the status of new employees who attest they are not U.S. citizens, but is limited to states where drivers' licenses are acceptable to the INS -- presumably those having the SSN on the face of the license. In the Machine Readable Pilot, the procedures are similar to the Basic Pilot except in states with machine readable licenses (currently, only Iowa is eligible). Each government department is required to assign a pilot program to at least one agency within the department. In addition, companies that have been found to violate the Immigration Act can be compelled to join in the program. The pilot programs will last for four years unless Congress re-authorizes them. ======================================================================= [4] White House Commission Urges Scrutiny of Private Employees ======================================================================= A special Presidential commission will recommend that certain private sector employees be subjected to in-depth background checks and polygraph examinations. Speaking before The Bankers Roundtable on September 11, Robert T. Marsh, Chairman of the President's Commission on Critical Infrastructure Protection, previewed the "core recommendations" that will be transmitted to the White House. Addressing "privacy issues in the employer-employee relationship," Marsh said: Throughout its year-long effort, the Commission has struggled to address the competing interests of security and privacy and the trade-offs between these two interests. . . . We are going to recommend that the Administration and Congress study ways to make some of the tools that the federal government uses to perform background checks and issue security clearances more readily available to employers within the critical infrastructures, at least in filling certain sensitive positions within those infrastructures. These efforts may afford you, for example, a greater ability to inquire into and make use of criminal history information, employment histories, and credit history information. Amendments should also be made to federal polygraph law to include within the scope of current exemptions those who are in the business of providing information security services. The "critical infrastructures," as defined by Executive Order 13010, include "telecommunications, electrical power systems, gas and oil storage and transportation, banking and finance, transportation, water supply systems, emergency services (including medical, police, fire, and rescue), and continuity of government." The full text of the Marsh address is available at: http://www.pccip.gov/marsh_banker.html ======================================================================= [5] ID Cards to Cost $10 Billion ======================================================================= The Social Security Administration announced on September 22 that it would cost up to $10 billion to re-issue Social Security cards as tamper-proof identifiers. Congress required the SSA to assess the cost as part of the 1996 immigration and welfare bills. The SSA report reviews the history of the SSN from its creation in 1935 through the current day. The report declines to make any policy recommendations, but recognizes some of the privacy issues raised by the use of the SSN as a national identifier. An appendix to the report includes pending legislation that would limit the SSN's use. The report examines the different technologies for ID cards from basic plain plastic cards to smart cards, including those that would include a picture or biometric identifier. It notes that SSA cannot accurately assess how many actual SSNs are in use -- the agency is only able to estimate a range between 269 and 327 million. At least 10 million are estimated to be duplicate numbers. More information on national identification cards is available at: http://www.epic.org/privacy/id_cards/ ======================================================================= [6] Imagine: FBI Finally Releases John Lennon Files ======================================================================= After resisting disclosure for more than 15 years, the Federal Bureau of Investigation has released almost all of its secret files on John Lennon. The documents underscore the sometimes questionable rationale for FBI surveillance operations and the importance of public oversight of those activities. Since being sued under the Freedom of Information Act in 1983, the Bureau had steadfastly withheld the Lennon files on "national security" grounds. Now released, the records document FBI surveillance of the former Beatle's political activities, under the close supervision of the Nixon White House. Significantly, none of the disclosed files describe Lennon as involved in any illegal act. In December 1995, U.S. District Judge Robert Takasugi directed the FBI to disclose whether it had "used unlawful activities in connection with the Lennon investigation." Rather than respond to the questions, the FBI negotiated a settlement to release the documents. Ironically, the Lennon files were released as a senior FBI official told an international privacy conference that "extreme" privacy concerns have "handcuffed" law enforcement's ability to investigate criminal activity. FBI Counsel Alan McDonald told the International Conference on Privacy in Montreal that, "Based on a theory of potential government abuse, important tools commonly used are to be restricted or embargoed." More information on the FBI investigation of John Lennon is available at: http://www.bagism.com/library/fbi-rock-criticism.html ======================================================================= [7] New Bills in Congress ======================================================================= HR 2215, Genetic Nondiscrimination in the Workplace Act. Introduced by Kennedy (D-MA) on July 22. Amends Fair Labor Standards Act to restrict employers in obtaining, disclosing, and using of genetic information. Referred to the Committee on Education and the Workforce. HR 2216, Genetic Protection in Insurance Coverage Act. Introduced by Kennedy (D-MA) on July 22. Limits the disclosure and use of genetic information by life and disability insurers. Prohibits insurers from requiring genetic tests, denying coverage, setting rates based on genetics, using or maintain genetic info. Referred to the Committee on Commerce. HR 2275, Genetic Employment Protection Act of 1997. Introduced by Lowery (D-NY) on July 25. Prohibits employers, unions from discriminating on basis of genetic information. Referred to the Committee on Education and the Workforce. H.R.2368, Data Privacy Act of 1997. Introduced by Tauzin (R-LA) on July 31. Recommends that businesses create voluntary guidelines to protect privacy, and stop spamming. Referred to the Committee on Commerce. HR 2369, Wireless Privacy Enhancement Act of 1997. Introduced by Tauzin (R-LA) on July 31. Expands ban and penalties on sale of scanners that can intercept cellular and digital communications and interception of communications. Referred to the Committee on Commerce. HR 2372, Internet Protection Act of 1997. Introduced by White (R-WA) on July 31. Limits FCC and state ability to regulate Internet. Referred to the Committee on Commerce. HR 2404, Stop the Theft of Our Social Security Numbers Act. Introduced by Filner (D-CA) on September 4. Prohibits IRS mailings that include SSN unless it is inside sealed envelope. Referred to the Committee on Ways and Means. HR 2507, ATM Public Safety and Crime Control Act. Introduced by Nadler (R-NY). Requires banks to install better surveillance cameras in ATMs. Referred to the Committee on Banking and Financial Services. S. 1146, Digital Copyright Clarification and Technology Education Act of 1997. Introduced by Ashcroft (R-MO). Sets up new rules for copyright in digital networks. Referred to the Committee on the Judiciary. ======================================================================= [8] Upcoming Conferences and Events ======================================================================= Net Worth, Net Work: Technology and Values for the Digital Age. October 4-5. University of Cal, Berkeley. Sponsored by CPSR. Contact: http://www.cpsr.org/dox/home.html 20th National Information Systems Security Conference. October 7-10. Baltimore, MD. Sponsored by NIST and NSA. Contact: http://csrc.nist.gov/nissc/ EPIC International Privacy Conference. October 20,1997. Georgetown University Law Center, Washington, DC. Sponsored by EPIC. Contact: shauna(a)epic.org. Managing the Privacy Revolution '97. October 21-23, 1997. Washington, DC. Sponsored by Privacy and American Business. Contact: http://shell.idt.net/~pab/conf97.html RSA'98 -- The 1998 RSA Data Security Conference. January 12-16, 1998. San Francisco, CA. Contact kurt(a)rsa.com or http://www.rsa.com/conf98/ (Send calendar submissions to alert(a)epic.org) ======================================================================= The EPIC Alert is a free biweekly publication of the Electronic Privacy Information Center. To subscribe, send email to epic-news(a)epic.org wih the subject: "subscribe" (no quotes) or use the subscription form at: http://www.epic.org/alert/subscribe.html Back issues are available at: http://www.epic.org/alert/ ======================================================================= The Electronic Privacy Information Center is a public interest research center in Washington, DC. It was established in 1994 to focus public attention on emerging privacy issues such as the Clipper Chip, the Digital Telephony proposal, national ID cards, medical record privacy, and the collection and sale of personal information. EPIC is sponsored by the Fund for Constitutional Government, a non-profit organization established in 1974 to protect civil liberties and constitutional rights. EPIC publishes the EPIC Alert, pursues Freedom of Information Act litigation, and conducts policy research. For more information, e-mail info(a)epic.org, http://www.epic.org or write EPIC, 666 Pennsylvania Ave., SE, Suite 301, Washington, DC 20003. +1 202 544 9240 (tel), +1 202 547 5482 (fax). If you'd like to support the work of the Electronic Privacy Information Center, contributions are welcome and fully tax-deductible. Checks should be made out to "The Fund for Constitutional Government" and sent to EPIC, 666 Pennsylvania Ave., SE, Suite 301, Washington DC 20003. Individuals with First Virtual accounts can donate at http://www.epic.org/epic/support.html Your contributions will help support Freedom of Information Act and First Amendment litigation, strong and effective advocacy for the right of privacy and efforts to oppose government regulation of encryption and funding of the National Wiretap Plan. Thank you for your support. ---------------------- END EPIC Alert 4.13 ----------------------- ..

1 0

Re: Remailer latencies
by David E. Smith 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Please excuse my reluctance to fund your dedicated line, but probably > the money would be better spent subsidizing hardware for people who > are willing to set up remailers. Sadly, I have to concur with the previous comments - but I'll go one better. Send me twenty bucks a month to cover the local phone company's charges for a second line, and I can get latency down to under an hour. I'll just put in an every-15-minutes-or-so crontab to dial up, fetch my system's mail, and process it. > Incidentally, if somebody offered you colocation space, would you be > willing to set up your machine there? I wouldn't, and I hope not many other remailer operators would either. A lot of the security on my machine comes from having physical control over it. (That includes the ability to rapidly delete things with extreme prejudice should the spooks come knocking at the door.) If I'm not sleeping in the room next to my machine, I don't have that kind of control. Also, I can't afford a second machine so I have to keep this one around for personal use :( dave (bureau42 remailer admin) -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQA/AwUBNCw6f66m0j5YvamrEQIN4ACfT7XirNvtvAMG9hpbtI9YclwY+3oAnjdM xBaiL5pG+FkOGVtGfdGuDASB =kSpE -----END PGP SIGNATURE-----

2 1

The Child Molester Prevention and Effective Sentencing Act
by Declan McCullagh 17 Dec '03

17 Dec '03

The problem with all the current bills like original SAFE and ProCODE is that they're too wimpy, abstract, arcane. Who cares about protecting business? Nobody, at least not when you'll be dubbed soft on crime. So what's the one thing everyone cares about and wants to protect? Yes, that's right: CHILDREN!!!! I think someone should introduce a bill called "The Child Molester Prevention and Effective Sentencing Act of 1997." The summary: "To reduce crime, protect our children, and secure our private communications from child molesters, pedophiles, and various perverts, this bill would spur the development of privacy-enhancing technologies by removing all export controls on encryption products." Who would ever vote against the CMPA? Who wants to be soft on child molesters and random perverts? Not even Louis Freeh could successfully oppose this one... -Declan (Okay, okay. It's a Friday. Time for me to go home...) ------------------------- Declan McCullagh Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/

5 4

No Subject
by CDR Filter Account 17 Dec '03

17 Dec '03

1 0

Re: Re: How the FBI/NSA forces can further twist SAFE
by Paul Spirito 17 Dec '03

17 Dec '03

From: jay holovacs <holovacs(a)idt.net>: >> ========================== >From: "Paul Spirito" <berezina(a)qed.net> >Date: Thu, Sep 25, 1997 11:58 PM > >And next year *is* an election year. If nothing awful happens, it shouldn't be much of an issue, but sooner or later there'll be a big bang made by terrorists who've used crypto in the plotting, & then anyone who opposed the FBI line will get drubbed, perhaps fatally (i.e. they'll lose their seat). On the other hand a publicized security disaster or "infowar" attack could spin things in the other direction. << Hmm... I assume hackers will attack the GAK infrastructure as soon as its begun. Terrorists or freedom fighters? You make the call. Paul ujgdejoxenotejotmbgtang ircpqbgluzstizg

1 0

NSA/FBI Agreement
by John Young 17 Dec '03

17 Dec '03

There was an earlier request for info about the working relationship between the NSA and the FBI. One of the Memorandums of Understanding (MOU) between the two was published as part of the NRC cryptography report: http://jya.com/nrcn3.txt This a part of the report's excellent overview of governmental electronic surveillance, the agencies involved and their mandates in its expanded Section N: http://jya.com/nrcnidx.htm

1 0

Charles Platt on wiretaps, government abuse of power
by Declan McCullagh 17 Dec '03

17 Dec '03

[Charles is an author, a Wired contributor, and a friend. --Declan] ------ Date: Fri, 26 Sep 1997 23:28:25 -0400 (EDT) From: Charles Platt <cp(a)panix.com> On 26 Sep 1997, Nathaniel Daw wrote: > > Indeed, state and local law enforcement authorities account for > > 50% of all the electronic surveillance court orders in the United > > States. > > Does anyone else find this statistic profoundly shocking, and for > reasons opposite from Herr Freeh's intent? 50% of surveillance court > orders come from the Feds? When I visited EPIC in DC I was told (reliably, I think) that wiretaps are not in fact a widely used technique in federal law enforcement--at least, not wiretaps that are done via correct legal procedure, with a court order. Subsequently I spoke to a friend whose father is an officer in Indiana state police; and he was of the opinion that "unofficial" wiretaps at the local level are relatively common as a means of confirming police suspicions prior to a fullscale investigation to obtain evidence admissible in court. (Obviously an illegal wiretap is not admissible.) Of course this is anecdotal, but it looks to me as if the real use for wiretaps--in today's society, at least--is as an informal timesaver. Tap someone's phone for a few days, see if there's anything interesting, and if there is, THEN pursue a formal investigation. Of course, Freeh may have ambitions extending far beyond this relatively trivial, low-level stuff. Even if he didn't, though, you could see that law enforcement would feel pissed about being deprived (potentially) of a convenient labor-saving tool. Since it costs Freeh nothing to agitate in favor of Total Access, why not give it a try? Demand something unreasonable, then settle for whatever he can get. As for the Constitution ... this of course is merely an archaic concept to which officials pay occasional lip service, like lapsed Catholics who still take communion once in a while, just to keep up appearances. The one positive aspect of all this is that officials and appointees are exposing themselves--proudly, without apology--as the unprincipled, corrupt opportunists we always suspected they were. As the radical British Member of Parliament Ken Livingstone once remarked (in a public speech): "When you get into politics, you find that all your worst nightmares about it turn out to be true, and the people who are attracted to large concentrations of power are precisely the ones who should be kept as far away from it as possible." ------------------------------------------------------------------------

2 1

Re: Plea from a parent who wants to keep their kid free of SSNs
by Syniker＠aol.com 17 Dec '03

17 Dec '03

yes dec -- but is Jane using PGP??? Larry.

1 0

Are You In Need Of A Lifestyle Change...
by qyDZS7G6b＠netshel.net 17 Dec '03

17 Dec '03

Now for the first time ever you have the opportunity to join the most extraordinary and most powerful wealth building program in the world! This program has never been offered to the general public until now! Because of your desire to succeed, you have been given the opportunity to take a close look at this program. If you're skeptical, that's okay. Just make the call and see for yourself. My job is to inform you, your job is to make your own decision. If You Didn't Make $200,000.00 Last Year... You Owe It To Yourself And Your Family To Give Our Program Serious Consideration! Also, when you start making this kind of money within weeks, after joining our team, you will actually learn how you can preserve it and how to strategically invest it! I invite you to call me for more details at 1-800-784-1710 EXT.1565. This is a free 2 minute recording, so call right now! Prosperous regards, Paul Rawlins This Is Not Multi Level Marketing/Serious Inquiries Only

1 0

Re: Remailer Attack (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 25 Sep 1997 16:31:48 -0700 > From: Tim May <tcmay(a)got.net> > Subject: Re: Remailer Attack > Generally, a bunch of things would be nice to have: > [several original examples deleted] - some sort of legal protection and recognition for the remailer operators - some mechanism for them to operate as a business entity with a clear profit. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

PARTY!
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, Like Barbie says, "Math is hard!" Below, is an invitation to my next and best costume party of all time. It even has the correct date and everything. Do come if you can. It will be a doozie. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ AREA 51+ PARTY ~~~~~~~~~~~~~~ The Pleasure of Your Company is Cordially Requested at the: Third Occasional Anarcho-Dilettante Pick-Your-Own-Damned-There, Masquerade Ball, Talent Show And Halloween Rehearsal 7:00pm Saturday October 18--3:00am Sunday October 19 650 Kenwyn Road (at McKinley) Oakland, California Loads of things happened on October 18. We're not going to tell you which one to commemorate. That's up to you. Check out the birthdays and historical events listed below. Pick one or go with something else. Your call. But no matter what theme you pick, it IS a masquerade ball, so you MUST wear a costume (or at least a mask). NO EXCEPTIONS. (Please, adults only. We regret that our house is very unsuitable for children.) THE ENTERTAINMENT At 8:00pm there will be a Dance Recital featuring Rainbeau, Gracie, Tish and Blythe. You DO NOT want to miss this. At 9:00pm there will be a Guest Talent Show. If you can sing, dance, tell a joke or pull a rabbit out of a hat, we IMPLORE you to sign up for this featured event. There will be prizes! CALL FOR TAPES If you did not like the music at the previous parties, we encourage you to bring a tape. We will play them for thirty minutes or until those actually dancing revolt. The default music will be Digital Music Express Dance Music Channel (or 70's disco by dance floor request). DOOR PRIZES Around Midnight, there will be a drawing for valuable and/or unique Door Prizes. (You must be present to win.) COMESTIBLES There will be some snacks and soft drinks, but if you are really hungry, it might be a good idea to eat before you come. B.Y.O.B. (Smoke'em if ya got'em, but outside, please. the house is a smoke-free zone.) RSVP Whether or not you are planning to attend, we want to hear from you. Please give the hosts a call so we can plan on your presence OR absence. Invited guests may bring additional celebrants WITH PRIOR PERMISSION OF THE HOSTS. This means you must call a host and get permission for EACH of the people you intend to bring. The house is big, but it is possible to have too many attendees. YOUR HOSTS Head Anarchist in Charge, Sandy Sandfort 510-839-3441/sandfort(a)crl.com House Hosts with the Most, Gracie & Zarkov 510-832-2044/emyrt(a)aol.com Web page host Sameer Parekh and C2Net Software 510-547-3617/sameer(a)c2.net P.S. THERE WILL BE A LATE FEE OF 10 CENTS PER MINUTE FOR EACH MINUTE YOU ARRIVE AFTER 8:00PM. The party starts at 7:00, so you get an our for free. Late fees will be used to defray costs. (This is no joke. More than $100 was collected at each of the last two parties.) Pictures from the 2nd Occasional Masquerade Ball may be found at: http://www.c2.net/~sandy/web.htm OCTOBER 18 IN HISTORY This is "Any Way You Look at It" Day! On this day in 1961, Henri Matisse's painting, "Le Bateau" went on display in the Museum of Modern Art in New York City. For six days, nobody realized it was hanging upside down. 1842 - Samuel Finley Breese Morse, laid his first telegraph cable in New York Harbor between the Battery and Governor's Island. 1892 - The first long-distance telephone communication was established between the mayors of New York and Chicago. 1924 - The term "Four Horsemen" was used in a "New York Herald Tribune" article by columnist Grantland Rice. The referenced Four Horsemen were the backfield of the University of Notre Dame which had beaten Army, 13-7. 1935 - Victor record #25236 was recorded this day by Tommy Dorsey and his Orchestra. It would become one of the most familiar Big Band themes of all time: "I'm Getting Sentimental Over You". 1943 - The first broadcast of "Perry Mason" was presented on CBS Radio. In the 15-minute (Monday-Friday) shows, Perry was played by Barlett Robinson, Santos Ortega, Donald Briggs and John Larkin. Larkin played the role the longest and was reportedly very disappointed when Raymond Burr got the gig on TV (1957). 1944 - The epic book, "Forever Amber", was published. This historic-romance novel was written by Kathleen Windsor. Although the book was very popular among women between the ages of 12 and 24, it was considered scandalous to be seen reading it; a reaction that lasted at least another three decades. 1956 - Football commissioner Bert Bell turned thumbs down on the use of radio-equipped helmets by NFL quarterbacks. 1971 - The final issue of "Look" magazine was published. It had been a must-see publication every week for 34 years. 1977 - Reggie Jackson made history and earned the nickname, Mr. October. Regg-a-roo (as Howard Cosell called him) hit three home runs on three successive pitches leading the Yankees to an 8-4 thrashing of the LA Dodgers in Game 6 of the World Series. 1979 - Following extensive renovation to return Radio City Music Hall to the look and feel of its 1931 Art Deco glory, the venerable New York City theatre reopened. "Snow White and the Seven Dwarfs" was the first live presentation. 1983 - Kenny Rogers and Dolly Parton received some gold to add to their collections --for their smash, "Islands in the Stream". OCTOBER 18 BIRTHDAYS 1854 - Salomon Andree (explorer: ill-fated North Pole expedition) 1859 - Henri Bergson (Nobel prize-winning philosopher, author: Creative Evolution) 1898 - Lotte Lenya (Karoline Blamauer) (Tony Award-winning singer, actress: Threepenny Opera; From Russia with Love, Semi-Tough, Roman Spring of Mrs. Stone) 1902 - Miriam Hopkins (actress: The Children's Hour, The Chase, Carrie, Barbary Coast) 1906 - James Brooks (artist: Flight: 235 ft. mural at La Guardia National Airport, NY; abstract expressionist exhibit: Ninth Street Exhibition) 1918 - Bobby Troup (actor: Emergency; singer, musician, TV host: Stars of Jazz; married to singer, Julie London) 1919 - Pierre Elliott Trudeau (Prime Minister of Canada) 1925 - Melina Mercouri (actress: Never on Sunday, Once is Not Enough, Topkapi; Greece's Minister of Culture) 1926 - Chuck (Charles Edward Anderson) Berry (singer: Lifetime Achievement Grammy; Maybellene, Roll Over Beethoven, School Day, Rock & Roll Music, Sweet Little Sixteen, Johnny B. Goode, My Ding-A-Ling; in film: Rock, Rock, Rock) 1927 - George C. Scott (Academy Award-winning actor: Patton; Anatomy of a Murder, The Day of the Dolphin, The Hanging Tree, Taps, Oklahoma Crude, The Prince and the Pauper, The Murders in the Rue Morgue, Malice) 1928 - Keith Jackson (sportscaster: ABC Sports, Wide World of Sports) 1933 - Peter Boyle (Emmy Award-winning actor: The X-Files; Taxi Driver, While You were Sleeping, Young Frankenstein, Midnight Caller, From Here to Eternity [TV]) 1933 - Forrest Gregg (Pro Football Hall of Famer: Green Bay Packers offensive tackle: Super Bowl I, II; Dallas Cowboys: Super Bowl VI; head coach: Cleveland Browns, Cincinnati Bengals: AFC Coach of the Year [1981]: Super Bowl XVI; Green Bay Packers; Southern Methodist University Athletic Director) 1934 - Inger Stevens (Stensland) (actress: The Farmer's Daughter, Madigan, A Guide for the Married Man, Hang 'Em High) 1937 - Boyd Dowler (football: Green Bay Packers wide receiver: Super Bowl I, II) 1939 - Mike Ditka (Pro & College Football Hall of Famer: Chicago Bears Rookie of the Year; Philadelphia Eagles; Dallas Cowboys tight end: Super Bowl V, VI; Chicago Bears head coach: Super Bowl XX; TV sports analyst: NBC Sports) 1943 - Willie Horton (baseball: Detroit Tigers outfielder) 1947 - Laura Nyro (singer: Up on the Roof; songwriter: Wedding Bell Blues, Blowin' Away, And When I Die, Stoney End, Stoned Soul Picnic, Sweet Blindness, Eli's Coming, Time and Love, Save the Country) 1950 - Wendy Wasserstein (writer: The Heidi Chronicles, Bachelor Girls) 1951 - Pam Dawber (actress: Mork & Mindy, My Sister Sam) 1952 - Jerry Royster (baseball: LA Dodgers pitcher) 1960 - Jean Claude Van Damme (actor: Kickboxer, Universal Soldier, Double Impact, Hard Target, Nowhere to Run, Predator II) 1961 - Erin Moran (actress: Happy Days, Joanie Loves Chachi, The Don Rickles Show, Daktari, Galaxy of Terror, Twirl, Watermelon Man, How Sweet It Is!) 1961 - Wynton Marsalis (Grammy Award-winning musician: jazz/ classical trumpet: Think of One [1983]; played on: Father & Sons; in orchestra: Sweeney Todd; composer: TV theme song for Shannon's Deal) OCTOBER 18 CHART TOPPERS 1957 Chances Are/The Twelfth of Never - Johnny Mathis Jailhouse Rock - Elvis Presley Be-Bop Baby/Have I Told You Lately That I Love You - Ricky Nelson Wake Up Little Susie - The Everly Brothers 1965 Yesterday - The Beatles Treat Her Right - Roy Head You've Got Your Troubles - The Fortunes Behind the Tear - Sonny James 1973 Half-Breed - Cher Ramblin' Man - The Allman Brothers Band Angie - The Rolling Stones Ridin' My Thumb to Mexico - Johnny Rodriguez 1981 Arthur's Theme (Best that You Can Do) - Christopher Cross For Your Eyes Only - Sheena Easton Private Eyes - Daryl Hall and John Oates Step by Step - Eddie Rabbitt THIRD SATURDAY IN OCTOBER Sweetest Day Frabjous Day Ironman Triathalon MISC. Persons Day (Canada) St. Luke's Day (patron of doctors, painters, glassmakers, artists, butchers, notaries, sculptors) Festival of Poetic Terrorism Alaska Day Pandrosos (Greek all-refreshing Goddess) Great Horn Fair (Kent, UK) National Chocolate Cupcake Day Chile Independence Day No Beard Day Lukesmas International Credit Union Day Ivory Soap invented 1st Art school opened Sandblasting patented BBC Radio established (1922) H.E.W. banned cyclamates Brotherhood of the Cooperative Commonwealth founded (1895) Puerto Rico became US Colony (1898) Lincoln shaved off his beard Hi and Lois comic strip began (1954) Water Pollution Control Act passed (1972) XYZ Affair Citroen 2CV automobile introduced (1948) Roseanne debuted (1988) 1st War Crimes trial began (1945) Disney's Jungle Book premiered John Lennon and Yoko Ono arrested for marijuana possession (London; 1968) Rules of American Football 1st formulated (1873) US attacked Iranian oil rig in retaliation for gunboat attacks (1987) International Court of Justice at the Hague announced (1907) UK declared Canadian women to be "persons" (1929) Louis XIV revoked the Edict of Nantes forcing many protestants (aka Huguenots) to flee France (1685) Teddy Roosevelt is ridiculed in the press for inviting black leader Booker T. Washington to the White House (1901)

2 1

Re: Remailer latency (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 25 Sep 1997 18:42:45 -0400 > From: Joey Grasty <jgrasty(a)gate.net> > Subject: Re: Remailer latency > At 11:58 PM 9/25/97 +0200, Anonymous wrote: > >If you operate a remailer, please tell us what you need to make it > >really work well. Perhaps the rest of us can help make it happen. > > Sure. Send me $125 a month for a dedicated line, and I'll insure > that you get low latencies on winsock. Malarky. Some basic issues regarding the physical infrastructure (YMMV): - since the lines are answered by modem and not voice AND they are not answered as the business you can use residential lines which means a much lower cost of operation. - assuming 1 in-dial and 1 out-dial (needed for maximum throughput and minimum latency) you only need long-distance on the dial-out. - the pricing on the move of my 4 POTS broke down thus: Line # Install $ Monthly $ Function 1 38.35 16.63 dial-in, no ld 2 30.95 16.63 dial-in, no ld 3 16.35 16.63 dial-in, no ld 4 16.35 30.08 voice w/ ld, call notes, caller id - the pricing on my other aspects are: ISDN 0.00 w/ 2 yr. 80.00 main link to contract provider Electrcity 12.00 per machine Modem 200.00 per line ISP 0.00 w/ 2 yr. 400.00 backup DNS, contract 4-day mail cache, admin account, usenet server access, full C-class, backup dial-in, their ISDN costs - you should also arrange legal and financial support Maybe that will give you a Ctl. Texas base-line for estimating what it would take to do the job. I should have an estimate for T1 pricing and setups in a couple of weeks, say something and I'll post the current status. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

MISTY algorithm
by Nobuki Nakatuji 17 Dec '03

17 Dec '03

Does anybody want MISTY algorithm ? If you want it,Please send e-mail to me. ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Future reading ??
by jason 17 Dec '03

17 Dec '03

Hi all, can anybody suggest any good books on cryptanalysis (or papers etc). I've read most of Applied Cryptography. What would be a good next step, reading wise ?? Thanks Jason

2 1

pna.show_story?p_art_id=347867&p_section_name=Sci-Tech
by Jim Choate 17 Dec '03

17 Dec '03

CNN Custom News logo [LINK] Home World U.S. Weather Sports Business Sci-Tech Showbiz Lifestyle alt On Target Customize Profile Help Feedback Switch User [ISMAP] InfoSeek [INLINE] September 27, 1997 3:22 am GMT [INLINE] Sci-Tech Title [INLINE] Ad Space ________________________ ___Word ___Theme ______________ Options [INLINE] The story below was selected from CNN Custom News - a new personalized service that delivers only the news that's important to YOU. Sign up now to receive your personal news stories, weather, sports scores, and stock quotes from over 100 different sources - all for FREE. If you're already a user, please login. Custom News AOL MAY INTRODUCE ADS ON PRIVATE E-MAIL Reuters 26-SEP-97 HAMBURG, Germany, Sept 26 (Reuter) - The German unit of the world's largest online service, America Online, said on Friday it planned to boost advertising revenues and that its parent company may begin including ads on private electronic mail. ``We are optimistic that we will make a leap forward with our advertising,'' said AOL Germany spokesman Ingo Reese in a telephone interview with Reuters. ``We waited until we reached the critical mass of 400,000 users,'' Reese said. ``Now we are opening ourselves up to the advertising business.'' He said the company expected robust growth from the new ad strategy and added AOL had considered several possibilities for increasing revenues including placing advertisements in the form of graphics on e-mail between users. ``That is one of the most attractive venues for the advertising industry,'' Reese said, adding that 40 percent of AOL customers in the U.S. use it because of its e-mail capability. Reese said AOL had received positive feedback from media that carry ads and ad agencies on a presentation tour through several German cities with its U.S. marketing manager Myer Berlow, which ended on Thursday. He said the U.S. parent company receives 16 percent of its $2 billion in annual turnover from ads. AOL does not have any plans for major print or television campaigns for the online service, Reese said. ``We want to build up our own advertising business first,'' he said. AOL in Germany is a joint venture of American Online and the media company Bertelsmann . It recently took over its rival CompuServe, which it says will make it one of the largest Internet service companies in the region. Reese said the company had not yet decided how the takeover would affect its marketing. Search the net: InfoSeek ___________________ ____ [Help] [INLINE] Ad Space Top Copyright © 1997 Cable News Network, Inc. A Time Warner Company ALL RIGHTS RESERVED. Terms under which this information is provided to you. [INLINE]

1 0

Re: Remailer latencies (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 26 Sep 1997 17:32:14 -0600 > From: A Player To Be Named Later <aptbnl(a)dev.null> > Subject: Re: Remailer latencies > And, since you asked, would it not be in the interests of remailer > operators to have a script which would generate random text, encrypt > it to various remailers and send it out as 'cover traffic'? > It would seem to me that this would be particularly valuable for the > remailers that receive the least amount of traffic. This aspect of traffic cover is more complex than it at first seems. Take for example the second simplest model that I am aware of. For each email that comes in n bogus emails go out with one remailed copy. So for each email we receive we end up processing n+2 emails. Since to be useful n must be reasonably larger than 2 to be effective we are left with a quandry. As we process more traffic (ie become successful) we find our bandwidth need growing at a linear rate of n, unfortunately the skills and resources to support this increase also get larger as we become more successful. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: Remailer Attack (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 26 Sep 1997 19:17:11 -0700 > From: Tim May <tcmay(a)got.net> > Subject: Re: Remailer Attack (fwd) > > - some sort of legal protection and recognition for the remailer > > operators > > I believe remailers are strongly protected by the Electronic Communcations > Privacy Act, which explicitly says that reconveyors or intermediary parties [deleted description] > This line of reasoning has not been used in any defense, perhaps because > there have been no prosecutions of remailers. Whether the courts, including > The Court, will conclude that the ECPA is protection, is of course unknown > to me. But that is the exact point I'm making - it hasn't been tested. Before anyone with a lick of sense is going to jump into the remailer business big-time somebody is going to have to put their neck on the block and set the liability standard. > > - some mechanism for them to operate as a business entity with a > > clear profit. > > And I mentioned this specifically. I'll grant you mentioned digital postage. This simply is not robust enough to handle the world of a commercial remailer operator. We'll just have to agree to disagree here because the standard digital postage argument simply doesn't sway me to support it. ____________________________________________________________________ | | | The financial policy of the welfare state requires that there | | be no way for the owners of wealth to protect themselves. | | | | -Alan Greenspan- | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

2 1

No Subject
by CDR Filter Account 17 Dec '03

17 Dec '03

1 0

Re: The CipherSaber Manifesto
by Brian B. Riley 17 Dec '03

17 Dec '03

On 9/24/97 8:42 PM, Antonomasia (ant(a)notatla.demon.co.uk) passed this wisdom: >reinhold(a)world.std.com (Arnold Reinhold) wrote: > >> CipherSaber-1 (CS1) uses Ron Rivest's RC4 algorithm as published in >> the second edition of Bruce Schneier's Applied Cryptography. .... > >> CipherSaber-1 is a symmetric-key file encryption system. Messaging >> takes place by attaching binary files to e-mail. Because CipherSaber >> uses a stream cipher, an initialization vector must be used to prevent >> the same cipher key from being used twice. In encrypted CipherSaber-1 >> files, a ten byte initialization vector precedes the coded data. For >> decryption, the initialization vector is read from the file and >> appended to the user key before the key setup step. ...... > >Why not _prepend_ the IV to the key ? As described here any >paranoics who use keys > 255 chars won't get the IV in place, and >will lose out. I think I'd also force 4 bytes of the IV to be the >current time, as a defence against the (P?)RNG getting me a repeated IV >eventually. ... same thing occurred to me though its easy enough to test the key length and the truncate it at 246 issuing a warning to the user ... Brian B. Riley --> http://www.macconnect.com/~brianbr For PGP Keys <mailto:brianbr@together.net?subject=Get%20PGP%20Key> "The idea that Bill Gates has appeared like a knight in shining armour to lead all customers out of a mire of technological chaos neatly ignores the fact that it was he who, by peddling second-rate technology, led them into it in the first place. -- Douglas Adams, on Windows '95

1 0

cypherpunks-e@htp.org list explodes!
by Bill Stewart 17 Dec '03

17 Dec '03

Well, I tried subscribing to cypherpunks-e(a)htp.org, the English-language relative of cypherpunks-j. There may have been one or two independent postings, but almost everything there was just the main cypherpunks list, forwarded and with archiving numbers stuck in the Subject: line. That wasn't a very good idea; people who want to subscribe to cypherpunks should do so directly, but if you do want to build a fourth list address for cypherpunks, you can check with Igor Chudov and Lance Cottrell about the software that makes it work without looping. However, a day or two ago, something broke, and most of the 1400+ messages I've gotten have been Mailer-Daemon complaints about not being able to reach somewhere or other for four hours. It may be because ssz.com was down for a couple of days, or may be from something else, but it's failed spectacularly. Killfiles are your friend, but for now I've simply unsubscribed. Thanks! Bill Bill Stewart, stewarts(a)ix.netcom.com Regular Key PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0