December 2003 - cypherpunks-legacy

Re: Anyone have info on foreign "ITARS"
by gtaylor＠gil.com.au 17 Dec '03

17 Dec '03

Bill Campbell wrote: >Does anyone have any pointers to info about the import/export >restrictions on encryption products in various countries. I know any >such summary would be very dynamic, but perhaps there's something >out there. The Australian regulations are available at: CUSTOMS (PROHIBITED EXPORTS) REGULATIONS - SCHEDULE 13 http://www.austlii.edu.au/au/legis/cth/consol_reg/cer439/sch13.html and: AUSTRALIAN CONTROLS ON THE EXPORT OF DEFENCE AND STRATEGIC GOODS: http://www.adfa.oz.au/DOD/al/iic/excontrl/excohome.htm Crypto software comes under Part 3, Category 5/2 of these regulations. (These documents are in MS Word format) ADFA, for those who are not aware, is the Australian Defence Force Academy, the major tertiary training institute for the defence forces. I have an extract of the key clauses of these regulations if anyone is interested. Briefly, the Australian regulations ban cryptography exports, claiming responsibilities as a party to the Wassenaar Arrangement, although the actual details of the latter regarding crypto seem obscure. However, an export license can be obtained on application to the Defence Ministry. The conditions of such a license are not openly stated, and at least one Australian software company has been refused a license. It would seem that even "public domain" software such as PGP is covered here. Ironically, the international version of PGP is available from the ADFA site at: ftp://ftp.adfa.oz.au/pub/security/pgp263i/ The government attitude to crypto policy generally in Australia is much more relaxed than in the USA. There is a recognition of business and personal need for strong crypto and that a balance needs to be sought between those needs and that of the law enforcement community. Although key escrow has been raised as an issue in some circles, it has not formed part of any government policy as yet. Greg Taylor EFA Crypto Committee

1 0

Re: Rejection policy of the Cypherpunks mailing list
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Toto <toto(a)sk.sympatico.ca> writes: > paul(a)fatmans.demon.co.uk wrote: > > > > John Gilmore is free to appoint > > whoever he wants to moderate his list, he is free to censor all > > messages which criticise him and his censorship, however, subscribers > > to the list should be told they are being censored on these grounds > > and not on some facade of "crypto relevancy" or another thin veil > > drawn weakly over content based censorship to protect a certain class > > of list members. > > It became rather glaringly obvious after moderation was announced > that class structure would be the defining feature of moderation. > Those who felt themselves to be in the 'upper class' made no > bones about it. That's a very insightful obeservation. "Cypher punks" are not opposed to the system. They don't want to change the existing social order. They want to join the upper class and enjoy its privileges (such as privacy and anonymity). They don't want to extend these privileges to the "hoi polloi" (unwashed masses). Jim Bell is a boor, but he had some very interesting ideas that upset the "cypher punk" crowd because he advocates dismantling the system they hope to join one day. This reminds me of a U.S. populist politician from the 1930's whose name I forgot, who advocated expropriating individual wealth above $5M. Why did his disenfranchised supporters want to leave the rich with $5M? Because each one hoped one day to have the $5M. Here's the $64K question: if you were approached by a LEA and offered a huge consulting fee to help break a code to obtain evidence in a criminal case, would you do it? I suspect most "cypher punks" would agree both for the money and for the glory, but no one would ask them because very few people on this list can break codes. :-) [No I would not, irrespective of the fee and the nature of the case.] --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

HELLO
by satan_is_a_hacker＠juno.com 17 Dec '03

17 Dec '03

Is ESDES a good program?

1 0

encrypt_1.html
by Lynx_User＠linux.nycmetro.com 17 Dec '03

17 Dec '03

Reuters New Media [ Yahoo | Write Us | Search | Info ] [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Previous Story: Texas Instruments Posts Loss, Stock Soars Next Story: FCC Chief Asks If Policy Should Focus On Internet _________________________________________________________________ Friday January 24 10:08 AM EST US Senator Will Reintroduce Encryption Export Bill WASHINGTON - Sen. Conrad Burns will reintroduce next week his measure to substantially eliminate export restrictions on computer encoding technology, a spokesman for the Senator says. "We are aiming for the 28th (of January) and it will be the same bill as last year," Matt Raymond, spokesman for the Montana Republican, said. President Clinton signed an executive order in November slightly relaxing export controls on encryption technology -- computer programs that use mathematical formulas to scramble information and render it unreadable without a password or software "key." But many in Congress and the computer industry have said the new Clinton policy did not go far enough to lift the Cold War era export limits that classified most encryption programs as munitions. Copyright, Reuters Ltd. All rights reserved _________________________________________________________________ ________________________ ___________ Help _________________________________________________________________ Previous Story: Texas Instruments Posts Loss, Stock Soars Next Story: FCC Chief Asks If Policy Should Focus On Internet _________________________________________________________________ [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Reuters Limited Questions or Comments

1 0

Cypher-Oops!
by Toto 17 Dec '03

17 Dec '03

I was just wondering if the CypherPunks list is now the only list that has an Administrative introduction for list members that could not be posted in full to the list-proper, as it contains a flame against an individual. Toto

1 0

Re: Rejection policy of the Cypherpunks maiing list
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <199701241411.GAA25271(a)toad.com>, on 01/24/97 at 09:09 AM, Toto <toto(a)sk.sympatico.ca> said: > I would like to point out, however, that anyone who has had their >posts 'sorted' into the 'flames list' is now a 'known flamer', as >evidenced by the fact that their post has been designated a 'flame' >on a list run by a champion of free speech on the electronic >frontier. Intresting.... Does a single flame make a flamer?? I have in the past been involved in heated arguments on just about every list/newsgroup I have been involved in. :) I think this goes back to the topic of reputation capital. IMHO the occational message that get's droped into the 'flames list' would have little effect on ones reputation. While a complete ban all of ones posting or even a majority of ones posts making it to the 'flames list' could/would have a detrimtal effect. Hmmmm... Actually there could be an intresting side affect of a moderated list to a posters reputation. Lets take the following example: John Doe likes posting rants & flames 90% of the time. The other 10% of the time he posts intelegent messages. Now on an un-moderated list a majority of subscribers would get tierd of his rants, write him off as a kook and kill-file him. His 10% of intelegent posts would be lost in the 90% of noise and his reputation would be adversly effected within the group. Now on a moderated list the 90% of rants & flames would never be seen by the list only the other 10%. His would wind up having a much higher reputation among the group compaired to if all his posts were seen. I am not quite sure how to judge this effect. Should one take into account the kooky behavior of a poster when veiwing his 'non kooky' posts? Does moderation have a detrimental effect to establishing a reputation based system for a group (how would Don Woods reputation faired if his rant's on OTP's & ISP had been filtered out?) > It is obvious that some of the more intuitively intelligent list >members are aware of this, as is indicated by the nervous fear with >which they 'explain why' their post is crypto-relevant. IMHO this is sheepish though I have noticed it before moderation started. If I have somthing to post to the list I see no reason to justify why I am posting it. This post I am making now has zero crypto-relevance and I make no appoligies for it. Do I think it is relevant to the list? Yes otherwise I would not have posted it. Either way no explination for the post is needed. - -- - ----------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. Finger whgiii(a)amaranth.com for PGP Key and other info - ----------------------------------------------------------- Tag-O-Matic: See the Future; See OS/2. Be the Future; Run OS/2. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMunqw49Co1n+aLhhAQEhUQQAikxVlOQuCQuNq2DoZgIhj85RvfaEOkvO 6QqoecASeunSyvh5gtXH+p6n3kq6i/NLAUwcmPYUtkdpKdPaRk4/OkhTVGNuVEHM eEQroUNNJ02g+42Gz9vEm2ZtWxWC9zAdIbmY/Hnw6SUyW/jgJKWNadd8Nh2HQYxV CXMUpweNbdg= =8pqg -----END PGP SIGNATURE-----

1 0

Mailcrypt nym.alias.net support
by Jeremey Barrett 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- For those of you who use mailcrypt (Emacs-PGP interface) for email, I have hacked in support for pseudonyms ala nym.alias.net. In fact, the code has nym.alias.net hardcoded for now. I'm gonna add more stuff, but I'm just letting this out as is. This patch affects mailcrypt.el and mc-remail.el. I made these changes to mailcrypt 3.4, so your mileage may vary on other versions. I did this after the C2 party tonight, so typos and bugs are possible. Please email me if bugs are found. "This value is not configureable" does not qualify, I know it's not configureable yet. (BTW there are a couple functions not used, I was doing it one way, then changed my way of thinking, but the code is ok so I left it.) Installing it: o cd to your lisp directory o cat /path/to/the/patch | patch -p0, or something similar (You will need to pgp this message before extracting the patch to get rid of the leading "- " on some lines.) o recompile the .el files, ala: emacs -batch -f batch-byte-compile mc-remail.el emacs -batch -f batch-byte-compile mailcrypt.el Using it: o You _must_ have a remailer chain defined. This does not work with a single remailer (though a chain of length 1 might work). o Compose a message or reply as normal. Once you are done (the message would go out without nyms or remailers or anything if you hit C-c C-c), hit C-c / n. o The first question asks for a remailer chain, it will do completions. o The second question asks for the name of your nym. This is assumed to be @nym.alias.net, DO NOT include @nym.alias.net. If your nym is jimbob(a)nym.alias.net, just answer jimbob. This does not do completions at the moment. Putting your nym in your .emacs file is a bit weird anyway. o You will be asked for a signature for your nym's private key. o The message will be rewritten to send(a)nym.alias.net and then to the remailer chain you chose. o Send it. Hack the code at will, if you make significant enhancements, please email patches to me. Of course there is no warranty of any sort, if it blows up your machine you're out a machine. I will put this on my web page (http://www.veriweb.com/people/jeremey) for those that prefer that. Ok, here's the patch: - ---------------------------------cut here----------------------------------- *** mailcrypt.el Tue Oct 10 12:33:45 1995 - --- /usr/home/jeremey/PGP/mailcrypt-3.4/mailcrypt.el Sat Jan 25 02:45:27 1997 *************** *** 51,56 **** - --- 51,57 ---- (autoload 'mc-sign "mc-toplev" nil t) (autoload 'mc-insert-public-key "mc-toplev" nil t) (autoload 'mc-remailer-encrypt-for-chain "mc-remail" nil t) + (autoload 'mc-remailer-encrypt-for-nym "mc-remail" nil t) (autoload 'mc-remailer-insert-response-block "mc-remail" nil t) (autoload 'mc-remailer-insert-pseudonym "mc-remail" nil t) *************** *** 101,107 **** (define-key mc-write-mode-map "\C-c/b" 'mc-remailer-insert-response-block) (define-key mc-write-mode-map "\C-c/p" ! 'mc-remailer-insert-pseudonym))) (easy-menu-define mc-read-mode-menu (if mc-xemacs-p nil (list mc-read-mode-map)) - --- 102,110 ---- (define-key mc-write-mode-map "\C-c/b" 'mc-remailer-insert-response-block) (define-key mc-write-mode-map "\C-c/p" ! 'mc-remailer-insert-pseudonym) ! (define-key mc-write-mode-map "\C-c/n" ! 'mc-remailer-encrypt-for-nym))) (easy-menu-define mc-read-mode-menu (if mc-xemacs-p nil (list mc-read-mode-map)) *** mc-remail.el Wed Oct 4 15:45:56 1995 - --- /usr/home/jeremey/PGP/mailcrypt-3.4/mc-remail.el Sat Jan 25 02:44:16 1997 *************** *** 378,383 **** - --- 378,401 ---- (re-search-forward "^$" nil 'move) (cons (copy-marker start) (copy-marker (point))))))) + (defun mc-find-nym-from-header (name subject &optional insert) + ;; Find the header with a "::" immediately after the + ;; mail-header-separator. Return region enclosing header. Optional + ;; arg INSERT means insert the header if it does not exist already. + (save-excursion + (goto-char (point-min)) + (re-search-forward + (concat "^" (regexp-quote mail-header-separator) "\n")) + (if (or (and (looking-at "From") (forward-line 1)) + (and insert + (progn + (insert-before-markers + (concat "From: " name "\nTo: \nSubject:" subject "\n\n")) + (forward-line -1)))) + (let ((start (point))) + (re-search-forward "^$" nil 'move) + (cons (copy-marker start) (copy-marker (point))))))) + (defun mc-find-hash-header (&optional insert) (save-excursion (goto-char (point-min)) *************** *** 400,411 **** - --- 418,442 ---- (defsubst mc-replace-main-field (field replacement) (mc-replace-field field replacement (mc-find-main-header t))) + (defsubst mc-nuke-main-field (field) + (mc-nuke-field field (mc-find-main-header t))) + (defsubst mc-replace-hash-field (field replacement) (mc-replace-field field replacement (mc-find-hash-header t))) (defsubst mc-replace-colon-field (field replacement) (mc-replace-field field replacement (mc-find-colon-header t))) + (defsubst mc-insert-nym-header (replacement) + (mc-find-nym-from-header replacement + (cdr (car (mc-get-fields "Subject" + (mc-find-main-header)))) t) + (mc-replace-main-field "To" "send(a)nym.alias.net") + (mc-nuke-main-field "Cc") + (mc-nuke-main-field "Organization") + (mc-nuke-main-field "Subject") + (mc-nuke-main-field "From")) + (defun mc-recipient-is-remailerp () (let ((to (mc-get-fields "To" (mc-find-main-header)))) (and to *************** *** 516,521 **** - --- 547,568 ---- (setq pseudonym (concat pseudonym " <x(a)x.x>"))) (mc-replace-colon-field "From" pseudonym))) + (defun mc-remailer-insert-nym-nym () + "Insert pseudonym as a From field in the hash-mark header. + + See the documentation for the variable `mc-remailer-pseudonyms' for + more information." + (interactive) + (let ((completion-ignore-case t) + pseudonym) + (setq pseudonym + (cond ((null mc-remailer-pseudonyms) + (read-from-minibuffer "Pseudonym: ")) + (t + (completing-read "Pseudonym: " + (mapcar 'list mc-remailer-pseudonyms))))) + (mc-insert-nym-header pseudonym))) + ;;}}} ;;{{{ Mixmaster support (defvar mc-mixmaster-path nil *************** *** 730,735 **** - --- 777,826 ---- (error "Unable to encrypt message to %s" (mc-remailer-userid remailer))))) + (defun mc-rewrite-for-nym-internal (nym &optional pause) + ;; Rewrite the current mail buffer for nym.alias.net. This + ;; includes pulling down the To: and Subject: headers, changing + ;; the To: header, and encrypting to send(a)nym.alias.net and signing + ;; with the nym's key. This should be used only as part of + ;; mc-rewrite-for-nym since it will subsequently chain the message + ;; through a set of remailers. + (let ((addr "send(a)nym.alias.net") + (main-header (mc-find-main-header))) + + ;; Move "Subject" lines down. + (goto-char (cdr main-header)) + (forward-line 1) + (mapcar + (function (lambda (f) (insert (car f) ":" (cdr f)))) + (mc-get-fields "Subject" main-header t)) + (insert "\n") + + ;; Move "To" lines down. + (goto-char (cdr main-header)) + (forward-line 1) + (mapcar + (function (lambda (f) (insert (car f) ":" (cdr f)))) + (mc-get-fields "To" main-header t)) + + ;; Insert "From" for nym.alias.net + (goto-char (cdr main-header)) + (forward-line 1) + (insert (concat "From: " nym "\n")) + + (goto-char (car main-header)) + (insert "To: send(a)nym.alias.net\n") + + (if pause + (let ((cursor-in-echo-area t)) + (message "SPC to encrypt for %s : " addr) + (read-char-exclusive))) + (setq main-header (mc-find-main-header)) + (goto-char (cdr main-header)) + (forward-line 1) + (let ((mc-encrypt-for-me nil)) + (mc-encrypt-message "send(a)nym.alias.net" nil (point) nil + (concat nym "@nym.alias.net") t)))) + (defun mc-rewrite-for-chain (chain &optional pause) ;; Rewrite the current buffer for a chain of remailers. ;; CHAIN must be in canonical form. *************** *** 744,749 **** - --- 835,856 ---- (mc-rewrite-for-remailer (car chain) pause) (mc-rewrite-for-mixmaster chain pause))))) + (defun mc-rewrite-for-nym (nym chain &optional pause) + ;; Rewrite the current buffer for nym.alias.net through a + ;; chain of remailers. CHAIN must be in canonical form. + ;; nym is assumed to be the nym's name WITHOUT @nym.alias.net on it. + (let (rest) + (if mc-mixmaster-path + (setq rest (mc-mixmaster-skip chain)) + (setq rest chain)) + (if (null chain) nil + (mc-rewrite-for-nym-internal nym pause) + (mc-rewrite-for-chain + (if (eq rest chain) (cdr rest) rest) pause) + (if (eq rest chain) + (mc-rewrite-for-remailer (car chain) pause) + (mc-rewrite-for-mixmaster chain pause))))) + (defun mc-unparse-chain (chain) ;; Unparse CHAIN into a string suitable for printing. (if (null chain) *************** *** 782,787 **** - --- 889,926 ---- (cdr (assoc chain-name chains)) chains)) (mc-rewrite-for-chain chain pause) + (if chain + (save-excursion + (set-buffer buffer) + (erase-buffer) + (insert "Rewritten for chain `" chain-name "':\n\n" + (mc-unparse-chain chain)) + (message "Done. See %s buffer for details." mc-buffer-name))))) + + ;;}}} + + (defun mc-remailer-encrypt-for-nym (&optional pause) + "Encrypt message for a nym server, to be resent, prompting for chain to use. + + With \\[universal-argument], pause before each encryption." + (interactive "P") + (let ((chains (mc-remailer-make-chains-alist)) + (buffer (get-buffer-create mc-buffer-name)) + chain-name chain nym) + (mc-nuke-field "CC") + (mc-nuke-field "Organization") + (mc-disallow-field "FCC") + (mc-disallow-field "BCC") + (setq chain-name + (completing-read + "Choose a remailer or chain: " chains nil 'strict-match)) + (setq nym + (read-from-minibuffer "Pseudonym: ")) + (setq chain + (mc-remailer-canonicalize-chain + (cdr (assoc chain-name chains)) + chains)) + (mc-rewrite-for-nym nym chain pause) (if chain (save-excursion (set-buffer buffer) - ---------------------------------cut here----------------------------------- - -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Jeremey Barrett Senior Software Engineer jeremey(a)veriweb.com VeriWeb Internet Corp. http://www.veriweb.com/ PGP Key fingerprint = 3B 42 1E D4 4B 17 0D 80 DC 59 6F 59 04 C3 83 64 PGP Public Key: http://www.veriweb.com/people/jeremey/pgpkey.txt "less is more." -- Mies van de Rohe. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface iQCVAwUBMunrci/fy+vkqMxNAQHpQQQAkN8wQ+/65qsN4326gFRmEMjcwQH1mj2v /WZGnxyB2ADYlF0AMXfU60NzUO31KZzEbbOu8oX2I0KptXrDGiLYoQ6uerw/W441 1B4uAd2pEztqWwfwyYmLj57meQWJw1IjH7AuF0Mz9NJ7OLEWq+H5CC9w4zwo6u1/ nTrWv396Y6Q= =jpyn -----END PGP SIGNATURE-----

1 0

HELLO
by Lou Zer 17 Dec '03

17 Dec '03

Is ESDES a good program?

1 0

Re: [No Subject:]
by Lou Zer 17 Dec '03

17 Dec '03

On Sat, 25 Jan 1997 00:30:57 -0800 Bill Stewart <stewarts(a)ix.netcom.com> writes: >Hi! It's useful to include a subject line in email so people >can decide whether to read it and have more context for it, >though calling yourself "fuck you" will probably deter a few people. >There are lots of anarchists on the net; you can run into some good >discussions on Usenet on several newsgroups with "anarchy" or >"anarchism" >in the titles. Rec.caves has good underground material...... You missed the hole point. You read that BECAUSE their was no header, if it was ANARCHY you would have just deleted it.

2 1

Re: your mail
by Lucky Green 17 Dec '03

17 Dec '03

At 06:54 PM 1/24/97 -0800, tekmasta(a)global.california.com wrote: >can anyone help me out with getting pgp working... I just got 2.6.2 >excutable the freeware one and its for dos... I need to get one that works >with eudora or netscape.... please help! You want PGPMail. A free, full strength, beta is available at http://www.pgp.com/ PGPMail offers single click integration with Eudora. I use it myself. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

1 0

Re: Rejection policy of the Cypherpunks mailing list
by Toto 17 Dec '03

17 Dec '03

paul(a)fatmans.demon.co.uk wrote: > > John Gilmore is free to appoint > whoever he wants to moderate his list, he is free to censor all > messages which criticise him and his censorship, however, subscribers > to the list should be told they are being censored on these grounds > and not on some facade of "crypto relevancy" or another thin veil > drawn weakly over content based censorship to protect a certain class > of list members. It became rather glaringly obvious after moderation was announced that class structure would be the defining feature of moderation. Those who felt themselves to be in the 'upper class' made no bones about it. Toto

1 0

Re: testing email from airport kiosk
by Dr.Dimitri Vulis KOTM 17 Dec '03

17 Dec '03

Bill Stewart <stewarts(a)ix.netcom.com> writes: > An update on the SF airport kiosk email machines: ... > It does support anonymous email, in that you can type in > any email address you want, and it doesn't seem to mind. > In addition to limited web, telnet, and outgoing email, > it lets you retrieve email with POP3. Doesn't seem to be a way > to get it to run a program, though :-) My immediate guess would be that everyone using it gets videotaped, then all activity is logged, and that the LEAs are waiting for some idiot to use it to retrieve kiddie porn and/or terrorist bobm-making instructions. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

Re: Scandinavian Goverments provide PGP to postal customers...
by Lucky Green 17 Dec '03

17 Dec '03

At 06:29 PM 1/24/97 -0800, Hugh Daniel wrote: > FYI: >>From: jsp(a)betz.biostr.washington.edu [...] >> However, some hardware is required. Because the key is on a >> smartcard, users must have smartcard readers installed on their >> computers, which aren't yet widely available. But Pdr Andler of >> Finnish Hewlett Packard says that later this year, smartcard readers >> will become standard on computers in Scandinavia. [...] Interesting piece of trivia: I recently talked with a fellow from Intel. They are looking to purchase keyboards with smartcard readers built in. They hope to get them at $30/piece from suppliers in Asia. The lot size? 10 million. That's a lot of smartcard readers. Even for Intel. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

1 0

encrypt_1.html
by Lynx_User＠linux.nycmetro.com 17 Dec '03

17 Dec '03

Reuters New Media [ Yahoo | Write Us | Search | Info ] [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Previous Story: Texas Instruments Posts Loss, Stock Soars Next Story: FCC Chief Asks If Policy Should Focus On Internet _________________________________________________________________ Friday January 24 10:08 AM EST US Senator Will Reintroduce Encryption Export Bill WASHINGTON - Sen. Conrad Burns will reintroduce next week his measure to substantially eliminate export restrictions on computer encoding technology, a spokesman for the Senator says. "We are aiming for the 28th (of January) and it will be the same bill as last year," Matt Raymond, spokesman for the Montana Republican, said. President Clinton signed an executive order in November slightly relaxing export controls on encryption technology -- computer programs that use mathematical formulas to scramble information and render it unreadable without a password or software "key." But many in Congress and the computer industry have said the new Clinton policy did not go far enough to lift the Cold War era export limits that classified most encryption programs as munitions. Copyright, Reuters Ltd. All rights reserved _________________________________________________________________ ________________________ ___________ Help _________________________________________________________________ Previous Story: Texas Instruments Posts Loss, Stock Soars Next Story: FCC Chief Asks If Policy Should Focus On Internet _________________________________________________________________ [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Reuters Limited Questions or Comments

1 0

Re: Anyone have info on foreign "ITARS"
by Greg Taylor 17 Dec '03

17 Dec '03

Bill Campbell wrote: >Does anyone have any pointers to info about the import/export >restrictions on encryption products in various countries. I know any >such summary would be very dynamic, but perhaps there's something >out there. The Australian regulations are available at: CUSTOMS (PROHIBITED EXPORTS) REGULATIONS - SCHEDULE 13 http://www.austlii.edu.au/au/legis/cth/consol_reg/cer439/sch13.html and: AUSTRALIAN CONTROLS ON THE EXPORT OF DEFENCE AND STRATEGIC GOODS: http://www.adfa.oz.au/DOD/al/iic/excontrl/excohome.htm Crypto software comes under Part 3, Category 5/2 of these regulations. (These documents are in MS Word format) ADFA, for those who are not aware, is the Australian Defence Force Academy, the major tertiary training institute for the defence forces. I have an extract of the key clauses of these regulations if anyone is interested. Briefly, the Australian regulations ban cryptography exports, claiming responsibilities as a party to the Wassenaar Arrangement, although the actual details of the latter regarding crypto seem obscure. However, an export license can be obtained on application to the Defence Ministry. The conditions of such a license are not openly stated, and at least one Australian software company has been refused a license. It would seem that even "public domain" software such as PGP is covered here. Ironically, the international version of PGP is available from the ADFA site at: ftp://ftp.adfa.oz.au/pub/security/pgp263i/ The government attitude to crypto policy generally in Australia is much more relaxed than in the USA. There is a recognition of business and personal need for strong crypto and that a balance needs to be sought between those needs and that of the law enforcement community. Although key escrow has been raised as an issue in some circles, it has not formed part of any government policy as yet. Greg Taylor EFA Crypto Committee

1 0

TEST--FLAMES
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, We are still working out the bugs. This message is SUPPOSED to go only to the unedited list and the flames list. If it shows up on the moderated list, we have a bug. I'd like to have a couple of you (Bill Stewart? Lucky Green?) let me know so we can trace down the problem and get it corrected. Thanks, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

TEST--MODERATED
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, We are still working out the bugs. This message is SUPPOSED to go only to the unedited list and the moderated list. If it shows up on the flames list, we have a bug. I'd like to have a couple of you (Toto? Dale Thorn?) let me know so we can trace down the problem and get it corrected. Thanks, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2 1

TEST--MODERATED
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, We are still working out the bugs. This message is SUPPOSED to go only to the unedited list and the moderated list. If it shows up on the flames list, we have a bug. I'd like to have a couple of you (Toto? Dale Thorn?) let me know so we can trace down the problem and get it corrected. Thanks, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: Encrypting ZIP disks
by Adam Shostack 17 Dec '03

17 Dec '03

Paul Kocher announced that he has cracked it, and can recover data quickly. He is not publishing details of the break. Adam Jeremiah A Blatz wrote: -- Start of PGP signed section. | "David E. Smith" <dsmith(a)prairienet.org> writes: | > 7. Secure sensitive files. | > To keep sensitive or confidential information safe, store it | > on a Zip disk and use your Zip Tools software to assign a | > password that must be used in order to read from or write to | > the disk. At work, you can protect sensitive information | > such as personnel files, company directories, and product | > plans and designs. At home, you can secure personal | > information such as tax records, budgets, and computerized | > checkbooks. | | FWIW (not much), Iomega claims that it can't recover the data on a | password-protected disk. However, they do export those things, so I | doubt it's strong. | | Jer | | "standing on top of the world/ never knew how you never could/ never knew | why you never could live/ innocent life that everyone did" -Wormhole -- End of PGP signed section. -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: Scandinavian Goverments provide PGP to postal customers...
by Alan Olsen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >> However, some hardware is required. Because the key is on a >> smartcard, users must have smartcard readers installed on their >> computers, which aren't yet widely available. But Pdr Andler of >> Finnish Hewlett Packard says that later this year, smartcard readers >> will become standard on computers in Scandinavia. "It is a really >> big help for users, who don't have to remember dozens of >> passwords when using different kind of services," Andler says. Didn't HP have a GAKed smartcard they were pushing? I wonder if anyone is going to make assurances that no one is spliting the keys with the soundman... -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAwUBMuo9reQCP3v30CeZAQFl+gf+JXHoo2WAenGiHQuEFQcaxiAZ6SPQJE/K PSBUqgksy+tcvcr8JsLGkkIDZLrJ9B0LaVp2wbbZY2j6YtcsGCgBW0WLXeXbKJve e0L8epy1GHWPO3d8peiI4InnZaXWM815+TSI2aUDX+NBLMNIkX6/k4muwQtW6KAo ysApcbxBWeyARWklyL3pCQyYRulPhtiPjlQ3g8dFVjx3PUhOmdTuK7rjCNo502MO quXS07kkUFYhn53Mej4r90NZ88awdCKjytsDcIYVTZxY8sBanZ4Qux0OYGvwqfyr fY2Hfd4GFBw/6FPLHn2IWD9AH5O7TudPOC4SAiLTymBGDct8vtBBUg== =fF/v -----END PGP SIGNATURE----- --- | If you're not part of the solution, You're part of the precipitate. | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Re: your mail
by Leonid S Knyshov 17 Dec '03

17 Dec '03

>try my site too http://gcwp.com/fadedimage > >can anyone help me out with getting pgp working... I just got 2.6.2 >excutable the freeware one and its for dos... I need to get one that >works >with eudora or netscape.... please help! Well the obvious answer is to RTFM (Note: F is for fine) on DOS version, its quite big. Also you seem to need Win PGP shell of some sort so that you won't have to type those commands, i memorised my commands on the 3rd day of usage so no big deal about shells. And then you cat'n'paste the code into your e-mail. In some cases you can set it up as a spell checker ;) Later.

1 0

Re: Encrypting ZIP disks
by Leonid S Knyshov 17 Dec '03

17 Dec '03

>"David E. Smith" <dsmith(a)prairienet.org> writes: >> 7. Secure sensitive files. >> To keep sensitive or confidential information safe, store it >> on a Zip disk and use your Zip Tools software to assign a >> password that must be used in order to read from or write to >> the disk. At work, you can protect sensitive information >> such as personnel files, company directories, and product >> plans and designs. At home, you can secure personal >> information such as tax records, budgets, and computerized >> checkbooks. > >FWIW (not much), Iomega claims that it can't recover the data on a >password-protected disk. However, they do export those things, so I >doubt it's strong. Well, I think one way to find out is to create 2 identical zip disks and encrypt them with different passwords. Then do sector by sector compare and see where the beast is hiding at :) Leo.

1 0

Public Key Partners
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hello, Do you know of a way I can contact Public Key Partners by e-mail or phone? Thanks. Jeremy K. Yu-Ramos President DataET Research Data Engineering Technologies

1 0

Public Key Partners
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hello, Do you know of a way I can contact Public Key Partners by e-mail or phone? Thanks. Jeremy K. Yu-Ramos President DataET Research Data Engineering Technologies

2 1

Re: Scandinavian Goverments provide PGP to postal customers...
by Alan Olsen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >> However, some hardware is required. Because the key is on a >> smartcard, users must have smartcard readers installed on their >> computers, which aren't yet widely available. But Pdr Andler of >> Finnish Hewlett Packard says that later this year, smartcard readers >> will become standard on computers in Scandinavia. "It is a really >> big help for users, who don't have to remember dozens of >> passwords when using different kind of services," Andler says. Didn't HP have a GAKed smartcard they were pushing? I wonder if anyone is going to make assurances that no one is spliting the keys with the soundman... -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAwUBMuo9reQCP3v30CeZAQFl+gf+JXHoo2WAenGiHQuEFQcaxiAZ6SPQJE/K PSBUqgksy+tcvcr8JsLGkkIDZLrJ9B0LaVp2wbbZY2j6YtcsGCgBW0WLXeXbKJve e0L8epy1GHWPO3d8peiI4InnZaXWM815+TSI2aUDX+NBLMNIkX6/k4muwQtW6KAo ysApcbxBWeyARWklyL3pCQyYRulPhtiPjlQ3g8dFVjx3PUhOmdTuK7rjCNo502MO quXS07kkUFYhn53Mej4r90NZ88awdCKjytsDcIYVTZxY8sBanZ4Qux0OYGvwqfyr fY2Hfd4GFBw/6FPLHn2IWD9AH5O7TudPOC4SAiLTymBGDct8vtBBUg== =fF/v -----END PGP SIGNATURE----- --- | If you're not part of the solution, You're part of the precipitate. | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0