December 2003 - cypherpunks-legacy

DYS_sys
by John Young 17 Dec '03

17 Dec '03

The New York Observer [NYC weekly], August 28, 1995. "Off The Grid: Non-Slaves of New York. 'Sovereign citizenship' isn't just for the power line-tapping, compound-dwelling white supremacists anymore. A guide to getting The System off your back, New York-style." They do not run around in military fatigues, they are not holed up in Central Park, and for the most part, they do not fall into the fringes of the extreme right or the extreme left. Yet here they are, in the center of the Center, going about their daily lives with nary an A.T.M. or credit card in their name, without a Social Security or voter registration card, without insurance or bank accounts and driving with licenses they themselves have rescinded. And one more thing: They do not pay any income taxes. What was made clear by Oklahoma City and Waco and Ruby Ridge, Idaho, and by Ross Perot and the Unabomber and most recently, Bill Bradley, is that dissatisfaction with "the system" is pervasive in this country. Living off the grid is the most personal way of expressing that discontent. But, says Sharon Biggs, who teaches a three-phase, 40 week course out of her Washington Heights home on how to successfully remove oneself from the system, "the complexion is no longer that of the wronged individual or visionary. It has moved into the mainstream -- people who suspect that there is something wrong." DYS_sys (17kb)

1 0

Let Me Repeat, the Raids Must Be Stopped! A PROFOUND THREAT TO FREEDOM OF SPEECH ON THE INTERNET
by syrinx＠c2.org 17 Dec '03

17 Dec '03

PLEASE FORWARD TO ORGANIZATIONS AND INDIVIDUALS SUPPORTING FREEDOM OF SPEECH ON THE INTERNET AND TO CIVIL LIBERTIES GROUPS. As many of you may know, the Church of Scientology (CoS), represented by the Religious Technology Center (RTC), whose primary function is to defend their copyrights and trade secrets, performed their third raid/seizure today against an Internet user for alleged copyright infringement. The prior two were against Arnie Lerma last week, and Dennis Erlich back in February. This raid was against FactNet, an organization dedicated to public awareness of various groups it labels as 'cults', including the Church of Scientology, and one of its leaders, Larry Wollersheim. [It is interesting to note that CoS owes $4 million to Larry Wollersheim based on an award by the courts, and affirmed by the Supreme Court. CoS has refused for whatever reason to pay this judgement, and did very questionable moving of assets out of California to avoid paying. Wollersheim has currently deposed the leader of CoS, David Miscavige, to ask him in court what happened to the assets of the California branch of CoS. Mr. Miscavige went into hiding over a year ago and so has not yet been served with this subpoena.] This raid and seizure is technically allowed under current U.S. civil copyright law when certain conditions are met. Congress originally allowed such raids to deal with copyright infringement involving bootleg material, where seizing the equipment used to produce the bootleg materials would effectively halt production until a court could assess the claims of the copyright holder. I am not sure if the Constitutionality of this law has been ruled upon, but in my opinion it oversteps the bounds of the intent of the U.S. Constitution regarding the bounds of search and seizure. Congress passed this law allowing seizure (in 1976) well before the advent of computer networks. The rationale that CoS used in convincing a judge to issue a Writ of Seizure is that seizing the computer equipment will halt the continued duplication of the copyright material, allegedly in violation of the rights of the copyright owner. This rationale does not hold any water when considering the Internet. Once the material is electronically disseminated on the Internet, seizing the computer equipment used to disseminate the material, as well as copies of the material itself, serves no useful purpose to stop the continued dissemination of the material. For example, the perpetrator of the alleged copyright infringement could, if they want to, simply purchase/rent/use a computer with Internet access, copy the material from another site on the Internet (which observation shows exists all around the world regarding the CoS materials), and redisseminate it as before. The only effective remedy is a Temporary Restraining Order (TRO) and a lawsuit against the individual ALLEGED to have infringed on the copyrighted material in excess of Fair Use. Thus, these three raids by CoS were clearly unnecessary. Furthermore, regarding civil liberties, they are even more troubling. In all three raids, the entire computer, related equipment and tapes were seized by CoS for their erasure of the alleged copyright materials, but without ANY court oversight which would filter out data which has no relevance to the matter at hand and which is protected by the right to privacy and other protections. There may also be further protection under the Electronic Privacy Act (or whatever it is called). A lot of private data from many people, not related to the alleged copyright infringements, may have been compromised. Furthermore, these raids serve to stifle Free Speech on the Internet. In essence, CoS is saying to the Internet community: "If WE feel you are disseminating our copyrighted materials in excess of Fair Use (and we will define what Fair Use is), then we will get a Writ of Seizure allowed under U.S. copyright law and take away your computer BEFORE the court decides on whether you exceeded Fair Use." And if much later the court determines that the dissemination was done under Fair Use, then there is no "effective" and "practical" remedy other than filing a laborious and expensive countersuit, which could drag on for years, to the detriment of the individual originally accused of copyright infringement. CoS knows this, and thus they really don't fear the consequences if they overstep their bounds in this matter. And who wants CoS to plaster the Internet and the newsmedia with their propaganda stating that "Federal Marshalls Seized the Computer of John Doe"? We all know that the general public may see John Doe as some criminal of the first order because Federal Marshalls were called in to handle the matter. This also serves to stifle Free Speech. Thus, we must call upon Congress and the courts to fix this "loophole" allowing these unnecessary and, in my opinion, unconstitutional raids/seizures of computer equipment for alleged *civil* copyright infringement in excess of Fair Use. This "loophole" is a clear threat to Freedom of Speech. I call upon electronic freedom activist organizations, such as EFF, and more traditional civil liberties organizations, such as the ACLU, to do something to stop these raids. I think asking a Federal judge to put a *temporary* halt on all such raids pending Federal court review on necessity and constitutional grounds. In addition, we should call on Congress to amend the copyright laws to take into the special aspect of computer networks so as to not allow the trampling of civil liberties that we've seen with the barbaric CoS raids. If you agree with me, do forward this to your Congressperson, to anybody you know involved in civil liberties issues, religious leaders, etc. Become aware and concerned. If you live in the U.S., you could be the next person raided just for exercising your right to Free Speech. Thank you for listening. Jon Noring **************************************************************************** For more information on the Scientology versus Internet "war", check out both alt.religion.scientology on Usenet, and the following Web site, which has links to nearly all Web pages devoted to the Scientology issue: http://www.cybercom.net/~rnewman/scientology/home.html **************************************************************************** -- OmniMedia | The Electronic Bookstore. Come in and browse! Two 9671 S. 1600 West St. | locations: ftp.netcom.com /pub/Om/OmniMedia/books South Jordan, UT 84095 | and ftp.awa.com /pub/softlock/pc/products/OmniMedia 801-253-4037 | E-book publishing service follows NWU recommendations.

3 2

Letter to AOL on "proposed censorship summit with radical right" (fwd)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 1 Aug 1997 07:16:14 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship(a)vorlon.mit.edu Subject: Letter to AOL on "proposed censorship summit with radical right" ---------- Forwarded message ---------- Date: Fri, 1 Aug 1997 10:09:12 -0400 (EDT) From: WildcatPrs(a)aol.com To: declanmccullagh <declan(a)well.com> Subject: Fwd: Your Proposed Censorship Summit with Radical Right Leaders --------------------- Forwarded message: Subj: Your Proposed Censorship Summit with Radical Right Leaders Date: 97-07-31 11:43:06 EDT From: WildcatPrs To: Steve Case Dear Steve Case, As one of the plaintiffs in the ACLU/ALA case on the CDA, who saw it through all the way to the Supreme Court, I am shocked and dismayed that you would dignify the demands of the Christian Coalition et al by sitting down with them in such a summit. You know and I know that America Online will leave that negotiating table having made major concessions on the subject of Internet censorship -- not only for content on gay and lesbian and AIDS, but also women's issues and many other subjects. The religious right have a very long list of subjects that they would like to censor out of U.S. libraries, schools and media...which you will discover if you take the trouble to read BANNED BOOKS, published each year by the ALA. Get a clue, Mr. Case This battle over "content" is not really about "child pornography." It is a thinly veiled disguise for the radical right's efforts to impose its total belief and its proposed penal system on the people of the United States. It wants to have the United States be like the Colony of Massachusetts before the Revolution. I suggest you read some history, and ponder whether you would have liked living under the religious dictatorship that ran the colony. Between 1962 and 1972, I lived in Spain as a working journalist for the Reader's Digest, working out of its office in Madrid, and I saw in operation just the kind of right-wing censorship system that the Christian Coalition et al would like to impose on this country. Part of its success involved just the kind of "self-censorship" that you are now proposing to slap on your own company. You are no different than the Spanish book publishers who sat down with the Catholic Church and agreed on what could be published. As a result, Spanish culture languished. The Spanish people reached the point where they had lots of jokes about self-censorship and didn't take their own media or culture seriously. It all came to an end in 1975, when Franco died, and the Spanish people were so sick of church and censors that the new government moved to end the hegemony of the Spanish Catholic Church and put an end to censorship. So shame on you for moving to introduce this kind of censorship to the United States of America. I have been a loyal customer of AOL since I got onto the Internet two years ago, and I will take my business elsewhere if you go through with this summit. Sincerely, Patricia Nell Warren Wildcat Press 8306 Wilshire Blvd. Box 8306 Beverly Hills, CA 90211 213/966-2466 213/966-2467 fax

1 0

Re: The sorry state of non-US crypto
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

There are also some links on http://iaks-www.ira.uka.de/subjects/crypto.html to ftp-servers with cryptographic stuff outside USA/Canada. The page contains several crypto-related links and is written in german language, but the ftp links at the end of the page are language-independent. Hadmut

1 0

Re: Attila T. Spammer / Re: Denning questions/reverses her position? (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Subject: Re: Attila T. Spammer / Re: Denning questions/reverses her position? > From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) > Date: Fri, 01 Aug 97 09:18:19 EDT > I'm pretty sure she still supports the right of a corporation to > tell the users of corporate systems not to have anything on those > systems that the corporation can't decrypt. And why wouldn't you? Let's look at this a moment. 1. Business, irrespective of size, is not equivalent to the government and specificaly isn't mentioned in the Constitution at all so we are reasonably safe they are exempt from federal compliance with its requirements outside that detailed for citizens and regarding inter-state or international trade. 2. The relationship between employer and employee is one based on a contract. 3. Neither party is forced beyond their own needs and desires to sign the contract. 4. Each party is aware of the contents of the contract before they sign it, or at least is given the opportunity to be made aware. If somebody wants to sign a contract with no knowledge of its contents, so be it. 5. Who owns the computers? The business does clearly. Now a commen proviso on ownership is that the final decision, or the transfer of that decision, is up to the business. Just as it is ultimately up to you who gets to drive your car. 6. Most provisions of employment contain the proviso that the time you agree to work for that employer is to be spent on dealing with the employers needs and not the employees. This is after all at least one of the reasons behind using time off and floating holidays and such. 7. Provided the employee is aware of this policy at the time of signing OR is given a reasonable warning period before a shift of policy after hiring then the employee has no grounds to complain. Myself, I always ask my immediate supervisor for a description of company policy on this. I also always ask if they have an objection to me using the company system to log into my home system during lunch and other 'off-clock' hours. So far I have never been refused. Short answer to this, use your own resources for your own use and don't use other peoples resources to carry on your own activities unless you offer them a cut of the profit. Ultimately this isn't even a question of contracts but of simple plain ol' every-day manners. ____________________________________________________________________ | | | Participation requires more than just bitching! | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http:// www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: True Names and Webs of Trust
by monty.harder＠famend.com 17 Dec '03

17 Dec '03

BW> Be that as it may, I still think that Zimmermann assumed that BW> key<->real-life-identity mappings would be the primary purpose for the Web BW> of Trust when he wrote "pgpdoc1.txt". And I think he was wrong about that. BW> It is not "arrogant" or "offensive" to say that someone was wrong when you BW> believe that to be the case. Actually, this is what qualifies as a "wicked problem". Until pgp 1.0 came along, there was no way to know how people would =actually= use a public-key system. (Sure, there were lots of theories, and a few academic experiments, but those don't count as RL.) Phil tried to anticipate the kinds of errors that would be made by people unaccustomed to thinking in terms of attacks and threat models. Face it, the average.net.person is not into game theory. Phil was under severe time pressure to get a workable public key system out the door before the government slammed it shut in his face. Now that we have had an opportunity to observe people using the system, we can identify nuances that could never have been debugged on the test bench. We can explain to people the various paradigms for viewing keys, and the importance of being able to trust the "identity" of an anon.id, which seems oxymoronic on the face of it. Some kind of explanation by analogy seems in order: We all know of movie stars who changed their names for Show Biz, or authors who wrote under pseudonyms. Take Mark Twain for example. A person who had read a Twain book, or had friends (his own WOT) tell him how good/bad Twain books were, would develop his opinion of the man's work. His ultimate decision to (not) buy a particular Twain book has nothing to do with the True Name of Mr. Clemens. Where it =does= come into play is in the realm of law. Had Twain libelled a person, the means to identify the Man behind the Mask would be integral to executing the judgement of the court. And even then, if there were sufficient continuing royalties that could be attatched to satisfy the judgement, it would only be necessary to know the True Name of the publisher. So we must be very careful of what it is that we are certifying when we sign something. This is what needs to be addressed in future versions of PGP. * Free the Wisner Five! * Free the Wisner Five! * Free the Wisner Five! --- * Monster(a)FAmend.Com *

1 0

Spooks and Hackers, etc.
by Brad Dolan 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Subject: Internet Police According to an AP story, Wisconsin Attorney General James Doyle says that police must monitor the Internet to stop child porn, drug trafficking, and fraud. "We need to see that police are surfing the Internet just as other people are," Doyle said. "This is a good example of where the law is slower than technology." Doyle made his comments in a speech to the Wisconsin Chiefs of Police Association Conference.

3 2

One effort for Internet Privacy
by Chris Avery 17 Dec '03

17 Dec '03

On a lark, I dashed off a "letter to the editor" of the San Francisco Chronicle, quoted below, lo and behold it got published today. You will see I simplified and softened the message somewhat -- a little spin for the good guys never hurt: (published as lead letter, nice headline) "HOW FAR SHALL WE LET THE EAVESDROPPERS GO?" Editor -- Washington wants the right to "wire-tap" private communications on the Internet, and the issue is now being debated in Congress. I'm not raising the "content" issue, which can be handled by screening software or by ratings; this is instead the issue of privacy in person-to-person communications. The rationale for the bills before Congress is law enforcement, giving officials new methods to detect criminal activity. All well and good, but is it really wise to grant the bureaucracy access into this vital channel of personal communications before we fully understand its potentials? How far shall we let the eavesdroppers go? Beware, these aren't casual issues --- your rights are in danger. CHRIS AVERY Oakland

1 0

The End of the Ecash Trial?
by Nathan Loofbourrow 17 Dec '03

17 Dec '03

I have yet to see a date, but Digicash states several times in their press releases that Cyberbucks are only a trial currency, and that at some point in the future the trial will come to an end. Will the bottom drop out of the c$ market at that point? Without Digicash to authenticate currency, it would appear to be impossible to trade c$ coins. If and when Digicash announces an end date for the trial, I would expect to see quite a spectacular crash in the "real cash for ecash" market. The only way to preserve the market would appear to be providing an ecash-for-ecash exchange with a new bank, presumably a licensee of the Digicash software. Such a bank could, out of little more than good will and a desire to kick-start a new e-currency, offer to exchange c$ for the new ecash. Or, perhaps we just shrug our shoulders, kiss our hardly-earned Cyberbuck goodbye, and mumble about how it was fun while it lasted. Either way, in order to preserve the new e-currency's value -- and correct my economics where flawed -- we need the assurance that the money supply will not experience unreasonable growth. The ecash trial has Digicash's promise of a c$1M cap; is this trust sufficient leverage for the user to leave any amount of value in the Cyberbuck, or its successor? nathan

3 3

Re: Linux brutessl client
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

> I've been able to compile a working brutessl 1.02 cllient under linux > and gcc 2.7.0, but I get abysmal search speeds. > > My system is a pentium 60, which, according to the docs, ought to have > a speed of something over 14100 kps (that's what a 486dx2/66 with no > rotate left macro gets). > > brutessl -t reports that my system can do 11200 keys per second. <snicker> I only get 5900 keys/second on a SPARCstation 5:) Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

2 1

Fraud Control
by promotions＠web-promotions.com 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This message has been sent by Web-Promotions.Com and adheres to all North American laws pertaining to Bulk Email. If you would like to be removed from future mailings please respond back to the sending address and put REMOVE in the SUBJECT BOX. Placing the word remove in any other area of the email may go unnoticed. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----------------ALERT TO ALL WEB MASTERS--------------- Are you the victim of fraud? You may be being lied to by so called Live Video Feeds. Get what you paid for. 100% live video feeds. Not 12 hours live, 24 hours live all the time. Get Itslive feeds. They are LIVE LIVE LIVE!!! Samples at: http://www.linkitslive.com/candy user: live pass: demo Itslive offers more live 24 hour feeds than anyone else on the planet. But it does not stop there. We have hard core digital feeds too. Check out these new summer prices for unlimited feeds for your site. $400 Hard Core feed (Asian, Young, Lesbian, Anal, Oral, Inter racial, and Gay) $450 Digitized Itslive feed $950 24 hour Live Itslive feed Hundreds of packages available, see why top sites like Net babes, Pink Bits, and Webs Youngest Women use Itslive as their one stop Video Shop. ---------NEW***NEW***NEW--------- Personalize your site with our Sweetheart Program http://www.linkitslive.com/sweetheart To sign up or ask any questions mailto:Candy@Itslive.com Candy Roberts Itslive Direct Sales 3i Inc 800-555-8852 or 214-658-1520 Fax 214-658-1507 Candy(a)Itslive.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This message has been sent by Web-Promotions.Com and adheres to all North American laws pertaining to Bulk Email. If you would like to be removed from future mailings please respond back to the sending address and put REMOVE in the SUBJECT BOX. Placing the word remove in any other area of the email may go unnoticed. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

brutessl client
by David K. Merriman 17 Dec '03

17 Dec '03

Well, my 386SX-33 (w/FPU) is doing about 1000/sec, my Compaq Deskpro386/20e (w/fpu) is doing 1000/s, and my 486DX2-80 is doing 8100/s. The two 386 machines will be working on it full time, the 486 will be time-slicing with 'real work'. Now all I need is some keyspace :-) Dave Merriman This is a test (3 UUE lines) of the unconstitutional ITAR - 1/713th of the PGP executable. See below for getting YOUR chunk! ------------------ PGP.ZIP Part [015/713] ------------------- M=$<(&L`#*IPP",(G6(,,S,`P](<2RWU96XCW86/JBYV8A\D8@X'HB_9H#&\X MX'PCUB.,13B"X8`R?^J-:UB.M_`U\>[#)BS&5$0C,Y#^1CS>1`\T1QTXX6!3 M8H,),S$8G>&.WP(8IRA`-M['+`Q%&_C"">5-F%LX@<_Q$;*P'',Q$Z/AA[8M ------------------------------------------------------------- for next chunk to export --> http://dcs.ex.ac.uk/~aba/export/ <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> My web page: http://www.geopages.com/CapitolHill/1148

1 0

New Remailer Announcement
by Intolerant Remailer 17 Dec '03

17 Dec '03

----x------------------x----x------x---------------------x-x----- ANNOUNCEMENT: The "Intolerant Remailer" is now fully operational! ----x------------------x----x------x---------------------x-x----- Remailer Policy --------------- Read the header, you lazy bastard. Remailer Help ------------- You won't need any. Read the fucking header, like I told you! Remailer Stats -------------- Why do you want to know? Are you a cop, or something? Remailer Abuse Policy --------------------- Fuck you! For Further Information: ----------------------- Don't bother asking. As a matter of fact, I've come to the decision that I don't want a bunch of assholes like you using my remailer. Get your own goddamn remailer! ----x------------------x----x------x---------------------x-x----------- "Intolerant Remailer" is a registered TradeMark of "Automated Anonymous Assholes, Inc.", for use only by the "Electronic Forgery Foundation." ----x------------------x----x------x---------------------x-x-----------

1 0

PGPfone Release is coming soon! (fwd)
by gt7508b＠prism.gatech.edu 17 Dec '03

17 Dec '03

> As you may have seen, the news media has picked up on the upcoming > PGPfone release. This note is to let you know that we at MIT are working > with Phil Zimmermann and the PGPfone team to distribute PGPfone from > MIT. We expect to have a *BETA* test version (Macintosh Only) of PGPfone > available shortly. Is there a unix version planned??? -- =-=-=-=-=-=-= Tom Cross AKA The White Ninja / Decius 6i5 */^\* -=-=-=-=-=-=-=- -=-=-=-=-=- TWN615(a)mindvox.phantom.com GT7508B(a)prism.gatech.edu =-=-=-=-=-=-= =- "Government is not a reason, not an eloquence; it is a force. Like fire, =- -=- it is a dangerous servant and a fearful master." -- George Washington -=-=

1 0

Re: FCPUNX:'Telco Terrorism' -- Wired on Baby Bells v. the Net
by James A. Donald 17 Dec '03

17 Dec '03

At 10:18 PM 8/1/97 +1000, Apache wrote: > I note with great interest an independent provider in New Zealand which > has a better competitive market situation in this area than Australia > (and a lot of other things I might add) offers a user account with up to > 500kbs satellite feed for $79 (NZ) /mnth flat plus installation of $79 > plus you must by the satellite dish ($699). I would assume you can't > resell bandwidth on this set up so the two are not directly comparable. The (comparatively) free market telecom system in New Zealand is due to a LEFT WING, pro liberty, government, that adopted a strategy "let us privatize first and let the free market sort out the chaos later" The equivalent in America is almost unimaginable. Here in America left means statist, left means big brother is in charge. The same is true, or used to be true when I was there, in Australia, though not to the extreme that it is true in America. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

reuters crypto story (fwd)
by Lauren Amy Gelman 17 Dec '03

17 Dec '03

---------------------------------------------------------------------------- ---------------------------------------------------------------------------- Lauren Amy Gelman, USACM gelman(a)acm.org U.S. Public Policy Committee for the Association for Computing ---------- Forwarded message ---------- Date: Fri, 01 Aug 1997 16:24:40 -0400 From: Aaron Pressman <aaron.pressman(a)reuters.com> Subject: reuters crypto story Human rights groups favor strong encryption abroad WASHINGTON, Aug 1 (Reuter) - Human rights activists came to Capitol Hill on Friday to tell lawmakers of their need to use strong computer encoding programs, subject to strict U.S. export limits, in their work outside the country. The debate over exports of encryption technology, which scrambles information and renders it unreadable without a password or software "key," has largely pitted the interests of commercial companies and civil libertarians against those of law enforcement and intelligence agencies. But human rights advocates said Friday they also had a critical interest at stake. Swift and inexpensive communications over the Internet "promise to destroy the ability of abusive regimes to silence their people, hide their atrocities and blockade the truth," said Dinah PoKempner, deputy general counsel for Human Rights Watch. "Encryption offers the most fundamental protection to those who seek to bring abuses to light in these circumstances," she added at a briefing for congressional staff. Those who report human rights abuses can become victims of abuse if discovered, so the availability of encryption to hide electronic mail messages or faxes can be a matter of "life or death," said Patrick Ball, who trains human rights activists to use the technology. The Clinton administration generally prohibits the export of strong encryption unless the products allow the government to decode any message by gaining access to the software keys. A variety of encryption-related legislation is pending in Congress, including bills that would overturn the Clinton policy and relax the export limits. Ball, senior program associate with the American Association for the Advancement of Science (AAAS), warned that the use of so-called key recovery features to give governments access to coded messages could compromise the work of human rights groups. "How can we ensure that intelligence and law enforcement groups in repressive countries will not directly or indirectly obtain human rights groups keys from the U.S. government," Ball asked. "Human rights monitoring is always defined by repressive regimes as a threat to national security." Congressional staffers attending the briefing also heard from leading cryptography scientists who said U.S. export controls stifled research on encryption, thereby slowing the development of more secure computer networks. Alex Fowler, project coordinator with the AAAS, said the presentations were intended to counter the portrait of encryption users painted by law enforcement agencies. "We want to reaffirm that cryptography is a science, not just a pastime of anarchists, terrorists and hackers," Fowler said. The export rules prohibit U.S. researchers from collaborating with foreign scientists on coding technology, according to Ian Goldberg, a graduate student at the University of California. In January, Goldberg sucessfully cracked a message in a few hours that had been encoded with the most powerful encryption allowed to be freely exported from the United States. A Canadian citizen, Goldberg said that he could collaborate with others or publish research on the Internet while home from school. "But I can't go home every time I have an idea --the plane fare alone..." he joked. --Aaron Pressman((202-898-8312)) For related news, double click on one of the following codes: [E] [U] [MNI] [NAT] [CAN] [US] [WASH] [BUS] [TEL] [DPR] [TRD] [ENT] [MUNI] [GVD] [DBT] [INT] [FRX] [CA] [LEN] [RTRS] Friday, 1 August 1997 16:04:06 RTRS [nN01204006] ------------------------------------------------------------------------ Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Reuters Ltd.

2 1

Re: SSL CHALLENGE: Can't search with Win32 client!
by Peter Trei 17 Dec '03

17 Dec '03

> I've got some keyspace, from various projects and test projects on the > server, but no matter what key range I select, I can't get the Search > button to be active (not greyed out). > Anybody else getting this? > Joe I did. If you look at 'properties' you'll probably find the data needs updating. click up 'update' to do this. It now seems to be working form me. Now if only I could get the 'search status' window to tell me something... Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation trei(a)process.com

2 1

JYA Axed
by John Young 17 Dec '03

17 Dec '03

The ISP for jya.com, PrimeHost, an AOL subisidiary, has axed the site. We learned of this today after trying for a week to get an answer to why the site vanished. Tech said call Sales, Sales said it's not us, it's got to be Tech. Tech said it's definitely not us, and if it's not Sales or us it must be Bosses. Finally, a Boss was reached who said the site was "intentionally pulled." He claimed that it was "not a serious problem, so don't be alarmed," and sang cheerily about "some files" without elaboration. Maybe more next week, and we pray it turns out to be hysterically alarming and not merely a pissed Intel Prop owner seeking pay. JYX.com is still up, thanks to PrimeHost's autosub. Ten files there -- so far. We're humping to get the latest 60-page package of the RSA v. PGP suit there this weekend, thanks to Nobody.

3 2

WinNT or Linux for SSL challenge ?
by Daniel C. Cotey 17 Dec '03

17 Dec '03

I have a pentium 90 that will be set up to dual boot WinNT 3.5 server and linux 1.2.8, is one of them significantly faster ? --- --- Daniel Cotey dccotey(a)serf.uccs.edu dccotey(a)ecepc44.uccs.edu

1 0

PCs, bitte.
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text X-Lotus-FromDomain: BIONOMICS@INTERLIANT @ OUTBOUND From: "VitaminB"<VitaminB(a)bionomics.org> To: "DAILY DOSE"<DAILY_DOSE(a)maxager.com> Date: Fri, 1 Aug 1997 17:05:28 -0700 Subject: <<Vitamin B>>(August 1, 1997) Going their own way Mime-Version: 1.0 Vitamin B: Your Daily Dose of Bionomics August 1, 1997 Going their own way Even though Germany had signed a pledge to forget about taxing the Internet earlier this month, it seems that its parasitic bureaucracy has other ideas. A recent multimedia law in Germany has defined Internet PC's as devices that can receive audio and video, so the Gebuehreneinzugszentrale (GEZ), the collector of the TV tax in Germany, has decided that this tax applies to PC's as well. What does this mean for business? According to the GEZ, companies with 100 Internet-enabled PC's will be charged 1000 Marks (about $555), whether the PC's actually run audio or video or not. For those unfamiliar with the GEZ, this is the organization which enforces the TV tax by going into peoples homes and checking to see how many sets they own and in some areas driving around in special trucks to determine which houses receive signals. Bureaucracies, in an almost living way, seem to write their own code and respond viciously to threats to their territories. Unless the German government finds a way to limit the power of its bureaucracy, that territory will get bigger all the time. Source: _Ziff-Davis Network News_, July 30, 1997 --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

2 2

SSLbrute progress.
by droelke＠spirit.aud.alcatel.com 17 Dec '03

17 Dec '03

Date: Thu Aug 24 20:02:47 GMT 1995 Two hours into it, and the key numbers that brclient is returning show about 5% allocated already.... That brings this to closure in around 24 hours - 12hours for 1/2 the space. Although - I also just checked the status, and it doesn't seem to be up to date with the keys I am getting, and it doesn't show any that it does have under my name as being acked. This could be just a delay thing I guess, but it could also be that I just updated brloop and brclient to the latest versions. Has anyone else thought of putting Damien's slave code that checks for idle tty's, etc into brutessl? Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX http://spirit.aud.alcatel.com:8081/~droelke/

1 0

BruteSSL: WTF? 0c2b-cf7a NOACK 0c2b 50000 Joe Thomas <jthomas@ogi.com>
by jered＠MIT.EDU 17 Dec '03

17 Dec '03

It appears that Joe Thomas <jthomas(a)ogi.com> has more or less locked (until things start getting reassigned) most of the keyspace. Even if he had a MasPar, it would still take him more than 2 days to check this space. Does anyone know what the deal with this is? A simple error? A malicious attack? (I think that the SKSP is far to insecure to be effective....I could falsely ACK parts of the keyspace if I wanted to be mean.) An NSA agent who will check that keyspace and return the results in the next hour? --Jered jered(a)mit.edu

1 0

New Non-Remailer Announcement
by NO Remailer 17 Dec '03

17 Dec '03

ANNOUNCEMENT: "NO Remailer" Still Doesn't Work! ----------------------------------------------- Doesn't work, and probably never will... It is unlikely that attempts to get my drinking under control are going to be any more successful in the future than they have in the past, so the "NO Remailer" will never likely be of any use to those who wish to send anonymous email. However, if you are an impulsive person who is continuously sending out anonymous email that only comes back to haunt you and get you into trouble, then perhaps you should use the "NO Remailer." That way, you will get the satisfaction of sending the email, but will not suffer the consequences of it actually being delivered. Also, since our email often bounces when we are behind on payments to our ISP, you will get an opportunity to review your attempts at sending anonymous email, thus helping you to notice the really stupid things you say and do (such as including your .sig line in the nasty letter to your boss). In short, the "NO Remailer" is perfect for those whose lives are a mess and/or who are as big a loser as the "NO Remailer" operator.

1 0

Hello There
by whynotu＠NaturalInstincts.com 17 Dec '03

17 Dec '03

Please accept our apology if this was sent to you in error! If we have by mistake, please see removal instructions below. ============================================================= Dear Friend: We know how frustrating it is for most Online Marketers. You try and try, and just don't seem to get anywhere. And by anywhere, we mean...Make Money! You see, we've discovered a few secrets that we're going to share with you. Other people who already have this report found it helpful to print it out, sit back and read it, and spend a little time letting all of the ideas sort of sink in. We assure you, if you'll take just a few minutes to really concentrate on what we've given you here, you'll find this invaluable and worth tens of thousands of dollars (or more) to you. Anyway, that's all for now...print it out, spend a few minutes with it and look it over. But first, let me tell you a little story... Right now there are over forty million people surfing the Internet. By the year 2000, that figure is expected to more than double. With so many people using the Internet, smart "net"repreneur's are taking advantage of what this new (in terms of true commercial application) and exciting medium has to offer. The Internet presents one of the best ways to make money that has ever been introduced. On any given day you have the opportunity to reach more people than most cities have population wise. This is the reason so many businesses are scrambling to make their presence known on the Internet. Being "online" offers a person the ability to reach multitudes of people from all over the world. It also offers, to those who know how, THE ABILITY TO MAKE EXCELLENT MONEY. And we do mean excellent money!!! CONSIDER THIS POSSIBILITY: You wake up in the morning and you put on a pot of coffee. As you sip on your cup of hot "brew" you saunter over and turn your computer on. Then, as your monitor glows from dim to bright, you find that you have inquiries from all sorts of people requesting what you have to offer. Later, after you have finished reading your inquiries, you stroll out to your mailbox. You find it is filled with letters from people from all across the world! What's even better though, is that the letters are FILLED WITH MONEY; cash, checks, and money orders. Then, after tallying up the totals, you find that you have made anywhere between $200 to $1,000 and it isn't even one o'clock in the afternoon. Think of it: NO boss, NO traffic, and NO annoying Co-workers. Wouldn't it feel great to wake up in the morning knowing you were going to be making excellent money but didn't have to leave your house to do it!?! Wouldn't your life be far less complicated? The truth is, you can also be one of those who become financially independent via the Internet. AND THE BEST PART IS...IT DOESN'T REQUIRE A LOT OF MONEY!! What it does require is the knowledge of how, what, and where to do it. And that is where we can help. We can provide you with the knowledge of how to begin earning substantial income from your computer via the "information superhighway". And just so you know- THIS IS NOT A MLM, AND NO YOU DON'T WORK FOR US! YOU DO WHATEVER YOU CHOOSE! We just provide you with the information of how to make MONEY online. Even if you are unsure as to what to do, we will provide you with ideas for the some of the best online businesses and the secrets of bulk emailing. Throughout a year of trial and error, we have found the best tools to begin a successful money making Internet business. We will show you how to start with very little money and yet achieve maximum results. Our information includes suggestions on some of the best places you should be investing your money as well as how to get the most impact for your dollar. The report provides you with information crucial to your future business growth as an "online" company. We will provide you with a number of the critical tools you need to begin a highly profitable business from your own computer. This is a wonderful opportunity, we urge you to take advantage of it. You won't find too many people that will give away ALL of their secrets!! The majority of the people today, who are rich, have copied what someone else is or has been doing. That is what we are offering you now--a chance to copy our success!! It is very easy and we ARE for REAL! Sound too good to be true? That's what others have said. That is, until they Received their kit and saw for themselves just how easy it is to make money On the net! Hi NI, I received your report and free bonuses last Saturday and wanted to congratulate you on a job well done. I read through your report "How To Profit From The Internet" and I'm very impressed. I have bought other books and manuals about Online Marketing, Direct Marketing, E-mail, Mail Order, etc. Yours is the only one that explains the subject in a easy to understand language. I finally found the secrets I've been looking for. Once again, Great Job! Sincerely, John Strand - Satisfied Customer My late father always told me, "remember, Michele, there is no free lunch in life. You get out of life what you put into it." Through trial and error and a somewhat slow frustrating start, I purchased your report and finally figured out how to start a very profitable business from my home. Your report is great, you give the average person the tools and secrets to succeed. I know my dad would have been very proud of me. I can't thank you enough =) Michele B from Oregon Here's a little more incentive to check this out ~IF YOU ORDER WITHIN 3 DAYS~ We will send you: ****FREE $400 Bulk e-mail Software**** ****FREE $200 Check by phone, fax, email Software**** ****FREE $10 Calling Card**** ----PLUS---- We will send you a list of over 100 major search engines ready to surf on the Internet or to place a free link to your web page. And that's not all! Also, you will receive a list of 98 of the best inexpensive newspapers to advertise in. The list is complete with papers name, city, phone number, circulation and frequency (Daily or Weekly). Some advertisers are selling this bonus for $49.95. Imagine what a great offering we are giving you for FREE! And that's not all, we will also include with our report "How To Write A Great E-mail Ad "! You will find that this report by itself is worth thousands of dollars to you. These bonuses alone are worth several times the cost of the report. Are we nuts? No, it just shows how confident we are that you'll be delighted with the information you'll have...just like the others who are already using the information and making money. You will be suprised how quickly you can be earning money on the Internet! So, if you are seriously interested in learning how to acquire wealth by being online, ACT NOW!! Send $29.97 cash, check, money order or credit card information to: Natural Instincts 4676 Commercial St. SE Suite 201 Salem, Oregon 97302 Please print out the order form and mail it along with your payment. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ORDER FORM Yes, I'd like to get started immediately. Please send me "How To Profit From The Internet", and my FREE bonuses today! NAME______________________________________________________ ADDRESS___________________________________________________ CITY_______________________ STATE__________ ZIP__________ Deliver "How to Profit from the Internet" to the following email address: E-MAIL ADDRESS____________________________________________ Please check one of the following: ( ) I'm ordering within 3 days, please send my FREE software, $10.00 calling card and "How To Profit From The Internet" for the unbelievable low price of $29.97 today. ( ) I'm not ordering within the first 3 days of receiving this letter, so I agree to pay the full price of $49.97 and wish to only receive your report "How To Profit >From The Internet". Payment Method: [ ] Check (Checks will take an additional 7 days for processing) [ ] Cash [ ] Money Order ( ) Credit Card (note: we accept all credit cards and check/debit cards) Name of Credit Card _____________________________ Name as it appears on Card: _________________________________ Card Number: __________________________________ Expiration Date: _____ / _____ Signature of Card Holder _________________________ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ THE MARKET IS HERE - TODAY! TAKE ADVANTAGE OF IT!!!!! After you receive your report, I'll answer any questions time permits via email. I'm looking forward to helping you succeed in your new business! _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Thanks for your order, and best regards! /////////////////////////////////////////////////////////////////////////////// This Message was Composed using Extractor Pro E-Mail Software. If you wish to be removed from our future mailings, please reply with the subject "Remove" and this software will automatically block you from our future mailings. Thank you. ////////////////////////////////////////////////////////////////////////////////

1 0

Canada's Entrust does end-run around ITAR
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

------- Forwarded Message Date: Fri, 01 Aug 1997 18:13:20 -0700 From: kalliste(a)aci.net (J. Orlin Grabbe) To: snetnews(a)world.std.com Subject: SNET: [Fwd: Another torpedo slams into Clinton crypto policy] - -> SearchNet's SNETNEWS Mailing List Path: news.alt.net!news1.alt.net!news-chi-13.sprintlink.net!news-east.sprintlink.net!news-dc-26.sprintlink.net!news-peer.sprintlink.net!news-pull.sprintlink.net!news-in-east.sprintlink.net!news.sprintlink.net!Sprint!205.185.79.4!zdc!super.zippo.com!lotsanews.com!szdc!newsp.zippo.com!news1 From: jqp(a)globaldialog.com Newsgroups: alt.current-events.clinton.whitewater,alt.politics.clinton Subject: Another torpedo slams into Clinton crypto policy Date: Fri, 01 Aug 1997 00:21:25 -0500 Organization: None Message-ID: <33E17255.18BB(a)globaldialog.com> Reply-To: jqp(a)globaldialog.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Mailer: Mozilla 3.0Gold (Win95; I) Xref: news.alt.net alt.current-events.clinton.whitewater:189839 alt.politics.clinton:338125 NY Times August 1, 1997 Canadian Product Puts New Spin on Encryption Debate By PETER WAYNER Canadian company's recent release of a new encryption product and subsequent announcement that it had received a license from Canada to export the product has surprised many companies and U.S. officials. The release was startling because the United States and Canada historically regulated the encryption- exporting issue in synchrony. The company, Entrust Technologies Ltd., released a free version of its Entrust/Solo software on Tuesday, and announced that they had received a license from the Canadian government to export it to almost all of the world. - -=- [TABLE] -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= THE MOVE BY ENTRUST SEEMS TO EXPLOIT A DIFFERENCE IN THE REGULATIONS BETWEEN THE UNITED STATES AND CANADA. - -=- [TABLE] -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= This decision by Canada could signal a major rift developing between two allies over an issue that is becoming increasingly important to the computer software industry. In fact, the move seemed to startle the [*]Bureau of Export Affairs at the U.S. Department of Commerce. James Lewis, director of strategic trade at the bureau, would only issue a one-sentence statement through a spokeswoman: "This is under review as a potential enforcement matter." He offered no insight into which American laws were being violated. Shauna White, a spokeswoman for the company, said "We believe we are in full compliance with all the Canadian laws that apply." In the past, the United States and Canada enforced their encryption regulations with such cooperation that most controlled products are shipped in boxes announcing, "For U.S. and Canada only." The U.S. government was certain that Canadian regulations would block anyone from shipping the product out of Canada. Those regulations are still in place and there has been no change in the effect on products built in the United States. Programs written by Canadians, however, are another matter. Entrust was able to qualify for a license because their software contained what John Ryan, the company president and chief executive, said was "100 percent Canadian content." That is, it was developed in Canada by Canadian citizens. Entrust Technologies Inc. was spun off on Jan. 2, 1997, from Nortel (Northern Telecom) after Nortel developed the Entrust product. Entrust Technologies Inc. is based in Dallas, but most of the development work is done in Ottawa, Ontario, where the Canadian subsidiary, Entrust Technologies Ltd. has its offices. Ryan, for instance, is a Canadian citizen. The move by Entrust seems to exploit a difference in the regulations between the United States and Canada. Both countries are members of the Wassenar Arrangement on Arms Export Controls, a set of loosely controlled rules that took the place of Cold War- era regulations designed to reign in conventional arms and dual-use technologies. The arrangement regulates the export of encryption software but provided an exemption for general- use software that was freely available through either the public domain or widespread public channels like stores. Ryan explained: "Many countries have chosen to 'to turn that part off.' Canada has not chosen to turn that part off." The existence of this regulatory difference may have come as a surprise to many people in the United States because the Canadian software industry has not yet produced a top-rank international competitor. The academic computer science departments at colleges like the University of Toronto are first rate, but there are no companies with the same public presence as Microsoft or IBM. But Entrust Technology's emergence shows how quickly the public perception can become obsolete in the swiftly moving world of technology. The company is clearly hoping that its free version of the Entrust/Solo software will build acceptance for the commercial versions, which are also freely exportable. Many other companies follow the same strategy of releasing free versions to the public in order to publicize the commercial versions, which usually come with more features. Entrust allows people to download free copies of Entrust/Solo for personal use from their Web site, but they block requests from seven restricted countries: Libya, Iran, Iraq, Cuba, Angola, Syria and North Korea. France and Singapore are also blocked because they have restrictions on the import of technology. Entrust is already in heavy competition against a U.S. company, [*]Pretty Good Privacy Inc., which is circulating a free version of its encryption package, PGP 5.0. This version is available for home and non-commercial use without charge. The software, however, was developed in the United States and can't be exported without a license. The company has worked closely with the U.S. Commerce Department to smooth licenses for major U.S. companies seeking to use the software with their subsidiaries, but an individual license must still be granted in each case. Kelly Huebner Blough, director of government relations for Pretty Good Privacy, said: "Well, of course we would like the U.S. to license exports more liberally. Most of the other countries in the world license encryption software more freely. They may have strong policies on the books, but when it comes to implementation, the U.S. is the most restrictive." - -=- [TABLE] -=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ALL OF THE MAJOR SOFTWARE COMPANIES LIKE MICROSOFT, IBM AND SUN CONTINUE TO PRESS THE U.S. GOVERNMENT FOR RELIEF OF THE EXPORT CONTROL LAWS, ARGUING THAT BETTER AND BETTER SOFTWARE IS EMERGING THROUGHOUT THE WORLD. - -=- [TABLE] -=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Other companies will also be feeling the pressure. Ray Ozzie, the president of Iris, the developer of Lotus Notes, which is now owned by IBM, said: "This is further proof that easy-to-use, high-grade encryption products are available worldwide, and that U.S. companies continue to be at a disadvantage in the world marketplace. U.S. policy needs to change in order to take these realities into account." One of the most vexing parts of the regulatory equation involves unraveling whether the U.S. government can exert any pressure on Entrust Technologies Ltd. through its U.S.-based corporate parent, Entrust Technologies Inc. The current version of the regulations restrict U.S. companies from providing "technical assistance" to their foreign companies--a rule that would seemingly not apply to a product developed completely by Canadians. Earlier drafts were more vague and seemed to target any relationship or aid, but the final version focused on technical assistance. Companies with close relationships with the U.S. government are still circumspect. Steve Walker, president of the Glenwood, Md.-based [*]Trusted Information Systems, works closely with the Commerce Department to seek approval for all of its work done in Europe. They ask for a license for all of the software being developed by their subsidiary in Britain. "We've tried to be very careful about this, perhaps more careful about it than we need to be," Walker said and then pointed out, "We're getting approval." [*]Sun Microsystems is pursuing a strategy with a different corporate structure. The company bought a minority stake in a Russian network software company in 1993 and recently asked them to develop encryption software for the world market. The deal is undergoing scrutiny from the U.S. Department of Commerce, but no announcement has been made about the resolution. Sun announced that they hope to ship the software on August 15. Still, the range of a government is hard to measure. Greg Katsas, a lawyer in the Washington office of Jones, Day, Reavis, and Pogue, said: "Generally, the rules of jurisdiction of the place of incorporation apply, but there are cases where U.S. law reaches outside the boundaries. For instance, anti-trust law can cover acts done outside the U.S. intended to have an impact inside the U.S." All of the major software companies like Microsoft, IBM and Sun continue to press the U.S. government for relief of the export control laws, arguing that better and better software is emerging throughout the world. In the House of Representatives, legislation sponsored by Representative Bob Goodlatte, a Republican from Virginia, to liberalize export laws has found wide support, while similar legislation in the Senate has died. One of the major initiatives offered by the Clinton administration would ease export licenses for software that made it possible for law enforcement officials to obtain the software's keys with a court order. They propose lifting the restrictions for exporting the software using 56-bit keys with DES. A number of businesses have joined together what they call the Key Recovery Alliance to help negotiate with the government about the final implementation of this plan. Most major software vendors, including Entrust and Sun, are part of the alliance. While the companies are committed to producing software that helps recover encryption keys in emergencies, there is a great deal of debate about how this will be carried out. Entrust's product for office groups does offer key recovery, but it is a far cry from what the U.S. government would like to see implemented. Copies of the keys are only stored on the hard disk of the employee responsible for overseeing the network. There is no capability right now for interfacing with trusted third parties who would serve as recovery agents for the police. Still, Entrust also seems to be working to meet U.S. regulations. Their enterprise-wide system for larger companies has been granted a license for U.S. export even though it uses 56-bit keys. This license was recently granted as part of the United States' push for key recovery. It signifies that the U.S. Commerce Department felt that Entrust was moving toward compliance with the policy of smoothing access for the police. In two years, Entrust may integrate their key recovery system with licensed recovery agents or it could face losing its U.S. license. In the long run, this strategy continues to receive heavy resistance. While many businesses welcome key-recovery solutions for internal use, they seem to resist making it too easy for the police to access their documents. Corporations, after all, can be found guilty as well. The same rules apply to countries, which are finding themselves in an increasingly brutal worldwide competition for dominance. Countries with the most liberal export laws may be rewarded with a strong fraction of the market share and this is the crucial time when the decisions about product acceptance are being decided. Many MIS managers may choose Entrust's products simply because they don't need to fill out forms with the U.S. government in order to supply it to all of their foreign subsidiaries. Andrew Csinger is the President of Xcert, a Vancouver- based Canadian software company that manufactures encryption technology used for certification authorities. He expects that any difference between U.S. and Canadian encryption laws will be short-lived. "I think that market pressures are going to force the U.S. administration to respond more quickly, " he said. "In reality, cryptography is widely available throughout the world." Copyright 1997 The New York Times Company - -> Send "subscribe snetnews " to majordomo(a)world.std.com - -> Posted by: kalliste(a)aci.net (J. Orlin Grabbe) ------- End of Forwarded Message

2 1