December 2003 - cypherpunks-legacy

How many of HOTMAIL's 3,000,000 users want SSL???
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Please consider writing your corporacongressmyn and explaining to them briefly, yet <politely> your concern about packet sniffers. Hotmail's market is exploding and they just might need a way to distinguish themselves from their competitor American Express (usa.net=netaddress.com) during the next year, even while they continue living on the edge with weak push/advertising revenue. Send no money, but these people deserve our support: comments(a)hotmail.com "New features you would like to see or general comments about Hotmail." Or, support(a)hotmail.com "Assistance with using Hotmail's features or technical difficulties with your account." Remember, it just takes A MINUTE to... "contact Hotmail by phone: 408.222.7000 -- 10:00 am to 6:00 pm Pacific Time"

1 0

Bill of Goods, from The Netly News Network
by Declan McCullagh 17 Dec '03

17 Dec '03

************ http://pathfinder.com/netly/editorial/0,1012,931,00.html The Netly News Network http://netlynews.com/ May 9, 1997 Bill of Goods by Declan McCullagh (declan(a)well.com) Senate Democrats are preparing legislation that requires universities and other groups receiving Federal grants to make their communication networks snoopable by the government, The Netly News has learned. The draft also includes penalties for "unauthorized breaking of another's encryption codes," and restrictions on importing encryption products. At a Democratic leadership press briefing, Sen. Bob Kerrey (D-Neb.) yesterday said his bill slightly relaxed export rules in exchange for greater federal control over crypto imports. But what he appears to be truly aiming for is a full-scale assault on your right to use whatever encryption software you want in your own home. Academics are indignant over the strings attached to grants. "This is outrageous," says Dave Farber, a university professor at the University of Pennsylvania and an EFF board member. "It's going to generate roaring screams on campus. If you look at Internet II, if you look at the Next Generation Internet, if you look at campus networks -- all those have components of federal funds." It's diabolical. Researchers already have to comply with a legion of rules to qualify for grants. Kerrey's proposed bill, called "The Secure Public Network Act," would add yet another provision to the fine print. It requires that "all encryption software purchased with federal funds shall be software based on a system of key recovery" and "all encrypted networks established with the use of federal funds shall use encryption based on a system of key recovery." Key recovery, or key escrow, technology enables law-enforcement officials to obtain copies of the mathematical keys needed to decipher messages. In other words, someone else keeps a copy of your secret key -- and some proposed bills say that the cops may not even need a search warrant to seize it. And not just universities will be jump-starting the market for domestic key escrow. Organizations from defense contractors to the United States Institute of Peace to the American Red Cross receive federal monies. "This is out-and-out industrial policy," says Jim Lucier of Americans for Tax Reform. "It's going to affect every technology there is for doing business on the Net." What about the penalties for "unauthorized breaking of another's encryption codes?" That would criminalize cryptanalysis, the way to verify the security of encryption software you buy. "The only way to know the strength of a cipher is cryptanalysis," says Marc Briceno, a cryptography guru at Community ConneXion. Then there's Kerrey's statement saying "there will be" restrictions on what encryption products you're permitted to buy from overseas firms. This contradicts Justice Department official Michael Vatis, who told me at a conference this year that the Clinton administration did not want import controls. Though Cabe Franklin, spokesperson for Trusted Information Systems, says Kerrey was misunderstood. "In the briefing afterwards, I found out he didn't mean that at all. He meant import controls, but more regulation than restriction. The same way they wouldn't let a car with faulty steering controls in the country. He meant more quality control," Franklin says. (I don't know about you, but I'm not convinced.) But the real question is: Why does Kerrey think this rat-bastard bill has any chance of passing through Congress, especially when there's already legislation that would generally relax controls on crypto? After all, Rep. Bob Goodlatte (R-Va.)'s "SAFE" bill already has 86 cosponsors and shot out of subcommittee last week. Sen. Conrad Burns' (R-Mont.) "Pro-CODE" bill is headed for markup next month. The answer is simple: this a trading chit that the White House and the Democratic leadership can play to water down the Burns and Goodlatte bills, and perhaps meld all three together. The Democratic strategy makes sense. Members of Congress are driven by a fierce, desperate urge to compromise. The drive is primal: legislators are compelled to find a middle ground. But to their chagrin, crypto doesn't offer one. Either you keep a copy of the electronic keys to your files or someone else does -- which is exactly what the White House wants. Either you're free to speak privately over the Net using PGP, or you're not -- which is exactly what the White House also wants. This may seem like a lot of high-powered attention on an obscure subject; after all, encryption does nothing more than scramble, verify and reassemble bits of information. Besides ensuring that your messages are private, encryption provides the protocols for scrambling credit card numbers and minting electronic coins. It allows digital signatures, proofs of identity online, digital time stamps and even secure electronic voting. It lets anonymous remailers exist. It supplies the foundation and steel girders for an information society. Kerrey's sudden interest in cryptologic arcana likely stems from a recent addition to his staff: policy aide Chris McLean. McLean is hardly a friend of the Net. While in former Sen. Jim Exon's (D-Neb.) office, McLean drafted the notorious Communications Decency Act and went on to prompt Exon to derail "Pro-CODE" pro-encryption legislation last fall. Then, not long after McLean moved to his current job, his new boss stood up on the Senate floor and bashed Pro-CODE in favor of the White House party line: "The President has put forward a plan which in good faith attempts to balance our nation's interests in commerce, security, and law enforcement." Now, more ominously, McLean just might be Bill Clinton's appointee to fill a vacant slot at the Federal Communications Commission. If you think the White House is out to slam the Net, imagine what the FCC could do... ### ------------------------- Declan McCullagh Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/

2 3

FC: Tax the Net! Report from Capitol Hill...
by Declan McCullagh 17 Dec '03

17 Dec '03

************ Date: Fri, 9 May 1997 21:57:45 -0400 To: fight-censorship-announce(a)vorlon.mit.edu From: Declan McCullagh <declan(a)well.com> Subject: FC: Tax the Net! Report from Capitol Hill... Sender: owner-fight-censorship-announce(a)vorlon.mit.edu Reply-To: declan(a)well.com X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ So I'm sitting in this rundown basement meeting room in the Rayburn House office building listening to a bunch of DC policy wonks spout off about Internet taxation. Too bad I'll have to wait to get back to the bureau to log in. Gotta get Strosser in Purchasing to get me that radio modem. It'll be great for playing networked Quake when Senate Judiciary hearings are yawners. Bruce Cohen from the Treasury Department is speaking. Horn-rimmed glasses, nondescript blue suit, definitely a geek. Tries a joke: "I hope there are no criminal tax evaders in the audience." It flubs; folks glance at each other nervously. I lean over to the guy from Cox's office next to me and whisper, "I guess that's IRS humor." He deadpans, "For what it's worth." Cohen is praising a Treasury Department white paper released last fall that says basically "No New Net Taxes." That's true. But you have to read the fine print. Which I did. That's where one finds the very clear suggestion that existing tax laws must be extended to encompass the Internet -- in the kind of clumsy and misinformed way that has typified federal forays into legislating online behavior. "We have a tax system based on a 19th century model of industry," Cohen continues. "Cash poses problems for cash administrators. Electronic cash poses additional problems." It does. The guy from IBM admitted a couple minutes ago that if I buy _physical goods_ over the Net and have 'em shipped to my zip code (20036), then the usual taxes should apply. Just like mail order. But problems arise when the product sold is virtual. If I buy a copy of an email program from Poland, pay for it with digital cash from an Amsterdam bank, and get a partial refund from a firm in Singapore, which government taxes what? No wonder the Internet Caucus decided to organize today's luncheon. Everyone on the Hill's still scratching their heads. Now Americans for Tax Reform's Jim Lucier (a longtime f-c subscriber) is at the podium. He recommends "reengineering the tax code" to address some of the unique aspects of the Net. A steely silence descends on the room. Okay, that ain't gonna happen. Too bad. Lucier is one of the few folks in the room who has a clue about the Net. To be sure, cypherpunks have anticipated these regulatory problems for years. I remember Lucky Green, a digital cash guru and veteran 'punk, stopping by my apartment last summer. Over beers, we talked crypto-anarchy: as more and more transactions move online, as more folks become "knowledge workers," as they get paid in foreign e-cash for writing or hacking code, the Feds' ability to tax income (and virtual spending) will suffer. But that doesn't mean taxes disappear. (Yeah, I know. What a shame.) Governments always will be able to tax physical purchases and meatspace property. When I buy a loaf of bread at my favorite organic grocery down on Columbia Road, the Man can monitor the grocer to ensure he reports the transaction. Or property taxes: governments will always be able to extract 'em. Taxes will shift from income to sales and property. Things are winding down. Aaron from White's office is asking for questions. Embarassed silence. Nobody asks any. Is it because nobody understands the stuff or because everybody understands the stuff? Time passes. Yep, the silence is definitely caused by nobody wanting to sound stupid. Aaron gives up. The panelists get to ask each other questions instead. Lucier starts rambling about the economics of tax policy, but nobody can understand, so we all ignore it. Then Mark Rhoads, the guy supposedly representing the state legislators, stands up. He says the only funny thing of the afternoon: "I worked for Dirksen when he wasn't a building." Or something like that. Maybe you had to be there. Anyway, he doesn't like the Cox-Wyden bill that would prevent states from taxing the Net: "I'll give you a nightmare scenario. What if you had a garage sale and invited 80 million people to your garage sale. I happen to be a collector of antique plates. The efficiency the Internet creates allows me to find people. The complications involved in taxing that at either the federal or state level are amazing." Anyone want to bet that's going to stop 'em from trying? -Declan ------------------------- Declan McCullagh Time Inc. The Netly News Network Washington Correspondent http://netlynews.com/ -------------------------------------------------------------------------- This list is public. To join fight-censorship-announce, send "subscribe fight-censorship-announce" to majordomo(a)vorlon.mit.edu. More information is at http://www.eff.org/~declan/fc/

1 0

Kerrey's Crypto Bill
by John Young 17 Dec '03

17 Dec '03

Thanks to Declan McCullagh we offer Senator Kerrey's outline of his encryption bill, The Secure Public Network Act: http://jya.com/tspna.htm (12K)

1 0

Re: FCPUNX:List of GAK supporters
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 08:01 PM 5/7/97 -0700, Lucky Green wrote: > Below is a list of the members of the "Key Recovery Alliance" who are > working hard to make the world safe for GAK. Strikingly absent from the list are Microsoft, Netscape, and Intel. Strikingly present on the list is RSA and McAfee. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Security flaw in key recovery -- you're looking at it
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Date: Fri, 9 May 1997 14:34:01 -0700 Subject: Security flaw in key recovery -- you're looking at it awww ... go ahead, show us!!!! Otherwise, I just might not believe you. [This is only a test. If I had been in a bad mood, this message would have contained the private key of the CEO of a major Entrust customer, obtained from an Entrust trusted "key safe" server. Who am I? Can Entrust or its customer's officers finger me?]

1 0

New admin crypto policy
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

It is time something unfortunate happened to all those leading the push for new crypto limits.

3 2

Re: New admin crypto policy
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Tim May wrote: > > At 9:24 PM -0800 5/9/97, Huge Cajones Remailer wrote: > >It is time something unfortunate happened to all those leading the push > >for new crypto limits. > > You mean like attaching a new Ryder to the bill? > > --Tim McVeigh, er, May The story so far: Mr. Nobody sends a message to the cypherpunks list via an anonymous remailer suggesting that someone ought to fuck with Cyberpromo. Cyberpromo gets fucked with shortly thereafter. Mr. Nobody sends a message to the cypherpunks list suggesting that it's time for something unfortunate to happen to those leading the push for new crypto limits. Perhaps someone should start a betting pool to guess whether the spooks are taking aim at the remailers or if they are setting up a particular cypherpunk, instead. We could start a betting pool to guess who will shortly have something "unfortunate" happen to them, but that might get the winner in a lot of trouble. TruthMcVeigh

1 0

Re: Wine Politics Again!
by Blanc 17 Dec '03

17 Dec '03

At 09:26 PM 5/9/97 -0800, Tim May wrote: >Every day that passes, I'm more convinced that McVeigh did the right thing. >Some innocents died, but, hey, war is hell. Broken eggs and all that. ...................................................... Timothy must be drunk; I can't believe he said this. Because he wouldn't spend so much time writing sensible things of Truth & Light, if he thought the better thing to do for achieving libertarian values was to kill so indiscriminately with a bomb. After all, he subscribes to utmost discrimination. So I think right now he's less in the engagement of Reason and more under the influence of maybe some Bud Light. .. Blanc .. Blanc

14 29

Increase Traffic to your Web-site!
by Mercury Messenger Services 17 Dec '03

17 Dec '03

FutureGate's new "Super-Submission 150" service is a quick, inexpensive and effective way to increase your web site traffic or "hits". We will do the work required to make your site easier to find. We submit your information to the most popular directories and search engines in use today, making your site easily accessible to the millions of people looking for what you have to offer on the web. We will submit your web-site to 150 directories and search engines, at a low introductory fee of $29.95. Visit the web-site for details and a special bonus offer: http://www.futuregate.com/supersubmit/ ---------------------------------------------------------------------- To be removed from any future mailings, just reply with REMOVE in the subject line.

1 0

[STEGO] Certified primes
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Timothy Maya is just a poor excuse for an unschooled, retarded thug. ____ \ _/__ Timothy Maya \\ / \/

2 1

Now read the Interactive Journal without Logging In
by WSJ Interactive Edition Editors 17 Dec '03

17 Dec '03

We're delighted to announce that we've implemented one of the most frequently requested enhancements to The Wall Street Journal Interactive Edition: The ability to store your User Name and Password, so that you don't have to manually enter it each time you visit. Just ask for any Interactive Journal page, and when prompted for your User Name and Password, check the "Save your Sign-On" box on the login screen. >From then on, you can read the Interactive Journal without the extra step of signing on each time. You can turn this feature off at any time if you wish by visiting Your Account, located at the bottom of any Interactive Journal page. Also, if you access our pages using multiple computers, you'll need to automate your sign-on separately for each configuration. (And remember that this means anyone with access to your computer will be able to read the Interactive Edition using your account.) We hope this makes it much easier for you to read the Interactive Journal and that you'll let us know your reactions and suggestions. Best Regards, Neil Budde Editor inquiries(a)interactive.wsj.com _______________________________________________________________ Check out Small Business Suite, a new Interactive Edition feature covering issues that matter most to small business owners, entrepreneurs, and anyone who markets products or services to small businesses. http://wsj.com/edition/current/summaries/small.htm ________________________________________________________________ This is the New Features Alert e-mail list. If you do not wish to continue to subscribe to this list, sign on to The Wall Street Journal Interactive Edition and go to the following URL: http://wsj.com/user-cgi-bin/userMenu.html to change your account preferences. Or you can just send email to: stopmkt(a)lists.wsj.com Cancelling your subscription to The Wall Street Journal Interactive Edition will automatically un-subscribe you from any e-mail lists you might be subscribed to through our service. For further questions, please call our customer service department at 1-800-369-2834. __________________________________________________________________

1 0

Re: War & InfoWar
by Blanc 17 Dec '03

17 Dec '03

TruthMonger wrote: > Of course, you have your own definintion of innocenent bystanders, >while others may have different definitions. .......................................................... To me, an innocent bystander would be someone who was walking by a building which was blown up by someone with a grudge against its occupants. You lose the point of your attack when you kill those who do not relate to the reason for your attack. "To save the village, we had to destroy it." .. Blanc

2 1

Disinformation in L.A.
by Tim May 17 Dec '03

17 Dec '03

I just watched on CNN the images of the raid on the "militia cell" in L.A., cited as a cell having "thousands and thousands" of rounds of ammo (ooh, scary!), and of having "anti-government literature" (there ought to be a law against this kind of stuff!). They also claimed they found "armor-piercing rounds" and "cop-killer bullets." Well, I saw the cops and their shill reporters demonstrating what many of us have in our own arsenals. (The Second Amendment should be repealed!) The cops claim they know that "something was being planned." And how do they know this? Probably the standard method: infiltrate a narc into the group and have him plant ideas and spout extremist rhetoric, then use this same rhetoric to get a compliant judge to issue a search warrant, even if no actual crime has been committed. (Except the search warrant is used as a "raid warrant," with black-clad ninjas breaking down the doors...and if the victims inside think they're under attack by unnamed thugs and try to fight back, a good reason for the ninjas to start shooting. A good way to dispose of dissidents and heighten the sense of panic.) We live in a police state. --Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

12 22

DoD computer security
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- May be of interest: == Forwarded Message Follows ========================================= Date: Thu, 08 May 1997 23:22:55 -0700 From: Alan Hersh <cyberwiz(a)web-site.com> To: GsuNet List <gsunet-l(a)bgu.edu> Subject: Computer Attacks at Department of Defense http://www.fas.org/irp/gao/aim96084.htm Information Security: Computer Attacks at Department of Defense Pose Increasing Risks (Chapter Report, 05/22/96, GAO/AIMD-96-84) Pursuant to a congressional request, GAO reviewed the extent to which Department of Defense (DOD) computer systems are attacked, focusing on the: (1) potential for further damage to DOD computer systems; and (2) challenges DOD faces in securing sensitive information on its computer systems. ==================================================================== Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! -> http://www.epic.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ ... Want to use PGP? -> http://bureau42.base.org/public/pgpsteps.txt -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAgUBM3SXszltEBIEF0MBAQFmbAf/XMMsgXtxqb5o+Stsl63Kp5wFDaVbXThp bb8sIQfkxR8Zqq1CKw69wi/usX3ouw/3ejI856QviS72o50F2HLRuv3U213dOp/L AhPEBO7qF1otr9Ucrw5L42fE5nH89ZRlzHwuNr8+eA1CjjYF+IUNCAzKziebyqzY WdGeswMP8PWDocviJMl70o3FsNBJnj4HPom0Za3qVY8wXr3J+2i5LeSqLk0t7Yeo 5mDIiQiRXck/fVYeYSWR3lyXkj3nWxKSM1bhVxjfuzLaeUVbHFTB8rRxTSkqYz88 FenmXC9NFFYYrFKyQfXvb2hoRGoJxvtOBt3X76WpPw1moa3l83HTtQ== =yYeC -----END PGP SIGNATURE----- If encryption is outlawed, only outlaws will have encryption...

1 0

No Subject
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

## Newsgroups: Subject: Re: Disinformation in L.A. On or About 10 May 97 at 19:23, Igor Chudov @ home wrote: > Duncan Frissell wrote: > > On Sat, 10 May 1997, Kent Crispin wrote: > > > > > I would expect a "cypherpunk riot" to be a little more aimed at > > > cyberspace than real-world suburban neighborhoods. Wouldn't > > > you? > > There will be a few unfortunate explosions in the world over the > > next few years so I'm sure Tim is just hoping for a beneficial > > target selection. Those who tell don't know, those who know don't tell. > Duncan, it is doubtful that there is any member of this mailing > list, at least of those whom I have seen posting, who will dare to > raise his fat ass and blow something up. Man, Igor, you really hit that on the head. My "blowing things up" days are long over. That was 20 years or more ago AND 50-75 pounds. I say "Leave that to the younger ones, who think they are indestructable, anyway" > The "radicals" are mostly sitting and waiting for something dramatic > to happen, preferably as far from their nice houses and bank > accounts as possible. I've got a nice condo, a wife who is straight arrow, and a bigger bank account than I had in the militant hippie daze. I would, however take up arms for the cause of state's rights. I love my state far more than my country, even if I am a Nam vet. Of course I do considerable fire power at my disposal. All legal, by the way (at the time of this writing). > Jim Bell might be an exception, but I would not bet on him.

1 0

Re: One-Time Pads as Attack Method
by azur＠netcom.com 17 Dec '03

17 Dec '03

>The problem that someone might plant a message and a one-time-pad on >your machine makes for a good spy story; I would be more worried about >someone claiming that I had illegal software on my machine, since they >can always come up with a one-time-pad that will decode some file that >I do have on my machine (if they have access to it) and have the >``decoded'' text be a copyrighted program for which I do not have a >license. All the more reason to use a good disk encryption program to keep private as muc of you disk as possible (under CryptDisk/PGPDisk its everything but the System Folder). --Steve PGP mail preferred Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 Key available on BAL server, http://www-swiss.ai.mit.edu/~bal/pks-toplev.html --------------------------------------------------------------------- Steve Schear | tel: (702) 658-2654 CEO | fax: (702) 658-2673 First ECache Corporation | 7075 West Gowan Road | Suite 2148 | Las Vegas, NV 89129 | Internet: azur(a)netcom.com --------------------------------------------------------------------- I know not what instruments others may use, but as for me, give me Ecache or give me debt. SHOW ME THE DIGITS!

1 0

Re: Wine Politics Again!
by azur＠netcom.com 17 Dec '03

17 Dec '03

>I am shipping a few bottles of California's finest merlot (much nicer that >the trendy cabernets) to my sister and her husband in Hollywood, FL. Why not also include a bottle of Thunderbird for Chiles? --Steve PGP encrypted mail PREFERRED (See MIT/BAL servers for my PK) PGP Fingerprint: FE 90 1A 95 9D EA 8D 61 81 2E CC A9 A4 4A FB A9 --------------------------------------------------------------------- Steve Schear (N7ZEZ) | Internet: azur(a)netcom.com 7075 West Gowan Road | Voice: 1-702-658-2654 Suite 2148 | Fax: 1-702-658-2673 Las Vegas, NV 89129 | --------------------------------------------------------------------- God grant me the serenity to accept the things I cannot change; The courage to change the things I can; The weapons that make the difference; And the wisdom to hide the bodies of the people that got in my way;-) "Surveilence is ultimately just another form of media, and thus, potential entertainment." --G. Beato "Without censorship, things can get terribly confused in the public mind." -General William Westmoreland

1 0

Crypto Campaign
by harka＠nycmetro.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- "A ghost goes around in the world...the ghost of crypto" Such as Marx's line described the general fear of governments in terms of communism, so it may be adapted to cryptography. World-wide we see strenuous work to hinder, prohibit, outlaw free crypto in favor of the surveillance states. And reality shows, why they can do so: only a fraction of the Net-population is using it. Therefore it might be time for a wide-spread campaign to further the use of crypto. "Use a cipher...be cool!". While a lot of Cypherpunks may do so on an individual level already, it will not reach the other 30 million or so. IMHO we need something of the extent of the "Blue Ribbon Campaign", where almost everybody became aware of it and involved in. On some german crypto-webpages, they have a nice symbol for their campaign against the [german] "telecommunications act": a bug. Check out http://www5.inm.de/tkg/ for some graphics (the page is in german, but the pictures speak enough). Such might be a good way to make people aware of the isues at hand and spread free crypto. The german magazine "Der Spiegel" had last week an "E-Vote" on their web page: "If it were easy enough to encrypt your e-mail, would you use cryptography?" - more than 80 percent said yes. Clearly a call to our code-writing members. If we could initiate such a campaign, that besides giving info on the current attempts to make crypto "surveillance-friendly" etc., also gives not-so-technical users an easy way to use crypto for themselves, then we might affect the current state of affaires much more, than to endlessly rant and rage against it here in our Cypherpunk-Niche. "Use a cipher - be cool!" Ciao Harka /*************************************************************/ /* This user supports FREE SPEECH ONLINE ...more info at */ /* and PRIVATE ONLINE COMMUNICATIONS! -> http://www.epic.org */ /* E-mail: harka(at)nycmetro.com (PGP-encrypted mail pref'd) */ /* PGP public key available upon request. [KeyID: 04174301] */ /* F-print: FD E4 F8 6D C1 6A 44 F5 28 9C 40 6E B8 94 78 E8 */ /*<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>*/ /* May there be peace in this world, may all anger dissolve */ /* and may all living beings find the way to happiness... */ /*************************************************************/ -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBM3SoQDltEBIEF0MBAQFsLgf+MxtIEZkAI+T3OUPywvfkkmpALKXbGDHE fsSy5/xfh1LuePX8I6daBx7ZJ8e+lHZ4NpjJ20NOTcS7Bcy2W72GvUiiqTEb9UEK siGv99CUnN0wiDtsufMZ8FAjalyzoHrebOiaMGxFW9nqa1ba2qtnVz/D4GdadcP5 vNGmw881bMZvsi4/pw2YxpjXDZY03f5lwfdfaXPDBjOqJJFkG2DId58RwvTbh+B9 ciBDXRlRaH/ZmphA2Pq10AmI6PoegplKt4SeghQT1JB6S0BRGeE7e9cxfAMWIaqt AV+e0Qcf4q/QEgwzhN61noLeacPMaoNImOhrd8vabDUn3//5YCmHFg== =Wv29 -----END PGP SIGNATURE-----

1 0

Re: One-Time Pads as Attack Method
by 00043.an＠edtec.com 17 Dec '03

17 Dec '03

Your response is most interesting! It almost implies you can't publish for(i=0;i < filesize(B); i++) C[i] = A[i] ^ file_contents[i]; I wonder why the difficulty in simply (I thought of actually going ahead and doing this): Take a posting (B.) to cpunks by Tim May. THese get disseminated quite widely and he's well-known; his thoughts and style should make deniability of the message difficult. Calculate C = B ^ A such that A = kiddie porn of your choice. Post the UUENCODE of C. to cypherpunks, send the binary to Tim, etc. Call your favorite Agency to investigate. Your variant in which the file B. is known, as in KRNL386.EXE is also viable, if not more so! Is posting a TRANSFORM such as a 'OTP' that converts copyrighted material A into copyrighted material B a violation of anything, I wonder... You could convert everybody's Internet Explorer into a ZIP file containing a setup and executable for Netscape 3.0!! At 10:33 AM 5/10/97 -0400, Peter D. Junger wrote: >00043.an(a)edtec.com writes: > >: >: 1. Agents of the Enemy wish to create the appearance of you possessing >: document A. >: 2. They obtain some artifact you have emailed, or posted, or possess on >: your private local storage. --- >: Possibly even signed. Call this message B. >: 3. They create the XOR of A and B, the result being a 'one time pad' C. >: which of course, gives: >: private message B XOR C = target bogus message A. This result is of course >: not a one time pad; >: the plan is to accuse you of possessing materials that prove you are >: trading with the enemy, >: exchanging kiddie-porn, any of the usual things. >: 4. This 'one time pad' file C. somehow finds its way into your possession: >: it is an email attachment, >: embedded in some binary --- it could even be stego'ed into a GIF/JPG. >: 5. The agents break down the door and seize all your effects. >: 6. They are able to prove that you possess B and C, the XOR of which is A., >: a fact that is impossible >: to have happened at random. >: 7. The jury doesn't know shit, and figures that if the chances of B ^ C = A >: by accident are 0, >: then you must be guilty. > >It was in part for the purpose of demonstrating this possibility that I >wrote the OPT program that I later realized that I could not publish in >any form under the ITAR and cannot publish in electronic form under the >new Commerce Department export regulations (unless I apply for a license >(that I probably cannot get) from the government, a requirement that >violates the First Amendment to the United States constitution). And it >was the restraints on publishing that and other crypto programs that led >me to file suit to enjoin the enforcement of the export restrictions on >cryptography. > >The problem that someone might plant a message and a one-time-pad on >your machine makes for a good spy story; I would be more worried about >someone claiming that I had illegal software on my machine, since they >can always come up with a one-time-pad that will decode some file that >I do have on my machine (if they have access to it) and have the >``decoded'' text be a copyrighted program for which I do not have a >license. > >Do you think that Microsoft has a one-time-pad that will convert >Netscape 3.1 into Word for Windows? > > >-- >Peter D. Junger--Case Western Reserve University Law School--Cleveland, OH > EMAIL: junger(a)samsara.law.cwru.edu URL: http://samsara.law.cwru.edu > NOTE: junger(a)pdj2-ra.f-remote.cwru.edu no longer exists > > >

2 1

Re: War & InfoWar
by TruthMonger 17 Dec '03

17 Dec '03

Blanc wrote: > TruthMonger wrote: > > Of course, you have your own definintion of innocenent bystanders, > >while others may have different definitions. > .......................................................... > To me, an innocent bystander would be someone who was walking by a building > which was blown up by someone with a grudge against its occupants. > > You lose the point of your attack when you kill those who do not relate to > the reason for your attack. Not necessarily. Free thinkers are perfectly capable of judging the reasons behind those involved on both sides of a conflict, and making an individual judgement as to the culpability of both parties. When a citizen shoots an intruder who is breaking into their house and threatening their saftey, there will always be family members, lawyers and anti-gun proponents who will decry the individual's use of force to defend their home and person/family. There are others, whoever, who will recognize that the perpetrator is the one who is ultimately responsible for placing the homeowner in the position of having a need to defend themself. Personally, if I need to worry about my life because my government's actions makes them an actionable target of an increasing number of the citizens, then I am going to take action to change the government. I do not deny anyone's right to suffer silently, but neither do I deny an individual's right to strike out at the source of their oppression. If you have developed a method for waging war without ordinary citizens coming into the line of fire, then I would like to hear about it. I don't like conflict any more than the next person, but I do not see concession to the oppressor as a viable option just because conflict will cause loss and heartache. Take a look at the results of the appeasement policy that Britain had in regard to Hitler. It resulted in scores of deaths that could have been prevented had those proposing it taken a firm stand that supported freedom from tyranny. The fact is that Tim McVeigh is facing criminal charges for his chosen actions, while the murderers at Waco are not. Until the average citizens demand the same justice for government agents as is demanded of anti-government agents, the average John or Jane Doe can expect to get caught in the crossfire. TruthMonger

1 0

Vlad-smear blows himself...
by TruthMonger 17 Dec '03

17 Dec '03

Vladimir Z. Nuri wrote: > kC on TCM: > > > >"May they all be vaporized." > > > >"Every day that passes, I'm more convinced that McVeigh did the right thing. > >Some innocents died, but, hey, war is hell. Broken eggs and all that." > yeah, I've noticed that TCM is really uptight lately and has been way off > the scale (more so than usual) on the "panty-knot" scale. what gives, > Tim? I think the situation is mostly he's so upset that congress is > discussing bills with the words "crypto" in them, which is apparently > enough to make him cringe with terror. > > when the CDA was being passed, I think his hemor^h^h^h rhetoric > swelled up then too as well. but look at what happened with the > CDA-- it got challenged, killed by lower courts, > and is stuck in the supreme court, likely > to be struck down there too. far from the end of the world forecast > by some here. Get real. The Feds have attacks going on a dozen fronts on anything they support or oppose and they don't particularly care if a bill is constitutional or not, as long as it achieves the desired effect. They are happy as long as they can terrorize enough citizens and businesses with threats of imprisonment to move things in their desired direction. > do we have a constitution or not? if so, we have nothing to worry > about. What a crock of shit! This is just another variation of "It's not perfect, but it's the best sytem we've got." Why is it always the oppressors who seem so enamored of the way the system works? > TCM is terrified by virtually anything that happens in govt, which is > amusing and comical at times. If I thought Vlad-smear was not a paid government schill, then I would assume he is a fucking idiot. I love to see how quickly "patriots" stop waving the red, white and blue once the government's stick gets shoved up their own butt. Believe it or not, Vlad-smear, there are individuals who fight against loss of freedom and liberty even when it is someone else who is getting screwed. TruthMonger

1 0

Re: War & InfoWar
by Blanc 17 Dec '03

17 Dec '03

TruthMonger wrote: > The fact is that Tim McVeigh is facing criminal charges for his >chosen actions, while the murderers at Waco are not. > Until the average citizens demand the same justice for government >agents as is demanded of anti-government agents, the average John >or Jane Doe can expect to get caught in the crossfire. ........................................................ Well, you're an average citizen. Have you demanded the same justice for govmt agents, and was your demand honored? Gee, too bad. Tough luck. .. Blanc .. Blanc

1 0

Certified primes
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Given Timothy May's propensity to molest little children, is it any surprise that the state of California wants to have him castrated? /\ o-/\ Timothy May ///\|/\\\ / /|\ \

2 1

Money orders, debit cards, ...
by daw＠cs.berkeley.edu 17 Dec '03

17 Dec '03

Some court transcripts from the McVeigh case contain interesting information about real-life anonymous systems. See http://www.cnn.com/US/9703/okc.trial/transcripts/may/050697.eve.html Did you know that money orders are not so anonymous as you might think? On the order itself are digits identifying the post office where the order was purchased, as well as the date of purchase. Also, a private company testified on their money order service, and it comes out that they keep a computerized record of every money order purchase in a central database. Eek. And read about a real-life instance of traffic analysis of phone calls based on timing correlations. This one really happened, folks (though it was by mistake). Also, read about how a company offering prepaid debit cards searched through billions of records to find all phone calls to or from a certain number, etc. Read about how they entered a disk containing information on 100,000--200,000 phone calls (!) into evidence. (Note: contents of calls are protected by law, but traffic analysis specifically is allowed, far as I can tell.) And you value your privacy? Too bad!

2 1