December 2003 - cypherpunks-legacy

C'MON N' GIVE 'EM HELL, NET-NERDS!!!!
by lindat＠iquest.net 17 Dec '03

17 Dec '03

They asked for it: "To secure Net communications, the government will need to have access to private data exchanges using what is known as a key escrow security system," -Netscape Communications chairman Jim Clark, arguing for a security system called key escrow that would require you to give the government access to your private messages. Source: STAMPER'S NEWS NUGGETS (1) SPAM THE SIGN Netscape has a webpage at www.netscape.com. There is a "toys" area and any message you leave in that area goes to an ELECTRONIC MARQUEE SIGN at Netscape that all the employees can see. SPAM THAT SIGN. (2) SPAM NETSCAPE Here's where the EMAIL BLITZ should go (extra points for creativity): info(a)netscape.com General information admgr(a)netscape.com Netscape site advertising sales x_cbug(a)netscape.com Bug reports from X Window users win_cbug(a)netscape.com Bug reports from Windows users mac_cbug(a)netscape.com Bug reports from Macintosh users hr(a)netscape.com Netscape Human Resources department training(a)netscape.com Netscape Training programs information admgr(a)netscape.com Netscape site advertising sales and Sponsor program information proprietor(a)netscape.com Netscape electronic store feedback editor(a)netscape.com Feedback about Netscape's Net site ssl-talk-request(a)netscape.com E-mail list for Secure Sockets Layer protocol discussion standards(a)netscape.com Questions about Netscape's open-standards activities nswinapi-talk-request(a)netscape.com E-mail list for users of the Windows Netscape Server API CORPORATE HEADQUARTERS ------------------------------------------------------------- NETSCAPE COMMUNICATIONS CORPORATION 501 E. Middlefield Rd. Mountain View, CA 94043 415/528-2555 Product and sales information (7:00 a.m. to 5:00 p.m. PST) 415/254-1900 Executive offices 415/528-4124 Fax http://www.netscape.com ATLANTA Netscape Communications Corporation 1850 Parkway Pl. Suite 420 Marietta, GA 30067 CHICAGO Netscape Communications Corporation 2159 N. Seminary Chicago, IL 60614 DALLAS Netscape Communications Corporation 17304 North Preston Road Suite 800 Dallas, Texas 75252 NEW YORK Netscape Communications Corporation 599 Lexington Ave. Suite 2300 New York, NY 10022 NORTHWEST Netscape Communications Corporation 501 Middlefield Rd. Mountain View, CA 94043 SOUTHWEST Netscape Communications Corporation 111 N. Sepulveda Blvd. Manhattan Beach, CA 90266 WASHINGTON, D.C. Netscape Communications Corporation 6701 Democracy Blvd. Suite 300 Bethesda, MD 20817 THANKS AND A HAT TIP TO HELEN AT E.PLURIBUS FOR GETTING ALL THE ADDRESSES!!!!!!!! Kind regards, *********************** V ************************* DEATH TO THE NEW WORLD ORDER **************************************************** Linda Thompson American Justice Federation Home of AEN News & news videos, "Waco, the Big Lie," "America Under Siege" 3850 S. Emerson Ave. Indianapolis, IN 46203 Telephone: (317) 780-5200 Fax: (317) 780-5209 Internet: lindat(a)iquest.net ************************************************** Remember Waco. The Murderers are still free. *************************************************** The Army is going to courtmartial Spc. Michael New for not wearing a U.N. uniform, but the Army won't courtmartial the members of the 160th and 158th Special Operations, 82nd Airborne, Ft. Hood Cav Members, and 10thMountain Division members who helped MURDER CHILDREN at Waco. What's wrong with this picture?

2 1

Filtering Net Commercials
by Jeff Simmons 17 Dec '03

17 Dec '03

On December 1, Timothy C. May wrote: > One patch I'd pay money to have is one which intercept the "commercials" > Netscape blasts out at us and replace them with something else (maybe > nothing, maybe a "quote for the day," maybe something from a > user-selectable file of items). > > I understand that Netscape is collecting money for these "commercials," and > that they control what is sent out. So, any such patch to intercept/remove > these commercials would have to be done locally. Can this be done? This is from a post to cypherpunks back in September. Given the current situation, maybe a re-posting is in order. (If not, flames to my address please, the list has enough to worry about.) I just checked, it's still at the ucsb.edu site. - - - Begin forwarded message - - - On the subject of HTTP proxies, [SEVERAL FWD'S DELETED, ENTERTAINING SUBJECTS RETAINED] Subject: The agents/advertising arms race heats up Subject: OH YEAH BABY, FILTER ME HARDER >From: Axel Boldt <boldt(a)math.ucsb.edu> >Newsgroups: comp.infosystems.www.announce >Subject: SOFTWARE: Filtering ads out of popular web sites >Organization: Univ of California at Santa Barbara, Dept of Mathematics >Approved: www-announce(a)boutell.com >Message-ID: <44ercn$nhl(a)holly.aa.net> Several popular web sites have recently turned to putting advertising gifs on their pages. NoShit is a tool that filters these out so that you don't see them - in fact, you don't even download them in the first place, thus saving time, money and brain capacity. NoShit is implemented as a set of patches against Cern httpd to turn it into a "filtering proxy server". This means that the proxy maintains a list of URL templates together with corresponding filter scripts. When a document is requested form the proxy that matches one of the templates, then the page is piped through the corresponding script before being presented to the client. This works together with caching, if desired. The idea is to run your own personalized NoShit proxy server and point your browser to it. The proxy does the filtering; the browser doesn't even know about it. This scheme works with every browser. I have written a ready-to-use library of filter scripts for a couple of well known, ad-infected sites, including Yahoo, Lycos, Netscape, HotWired, CNN, Infoseek and NandO Times. You can change these or add your own very easily. Locations: <URL:http://math-www.uni-paderborn.de/~axel/NoShit/> (Germany) <URL:http://emile.math.ucsb.edu:8000/~boldt/NoShit/> (California) Enjoy, Axel - - - End forwarded message - - - -- Jeff Simmons jsimmons(a)goblin.punk.net

1 0

key escrow compromise
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

to most on the list, the subject of this message would be an oxymoron. ("there is no compromise!") regarding the recent Netscape brouhaha: I tend to agree with Clark in only one regard: the government is going to get into the key storage/retrieval business in some form or another eventually & inevitably; it's just not stoppable. like one of the NSA spooks said after the Clipper fiasco, "well, we had to try". the aspect that is up for grabs is whether these systems will be *mandatory* for all private communication. here's a quick idea. the post office is getting into certification authorization come hell or high water (ETA summer, 96). now, frankly I think this is a good thing. someday we will need some kind of legal agency to deal with citizen keys, so that we could have cryptographic dealings with federal agencies such as the motor vehicles department, etc. many are going to blast me to oblivion for saying this, though. but don't you think there are some benign government services that you would like to have access to via your "state" or "legal identity" key? this would prevent other people from faking your identity in front of the state, e.g. voter fraud, and other miscellaneous things. it seems to me the problem is when a government begins to insist that the only authorized encryption you can use must be based on the secret key they give you is where all the problems arise. so, what we could advocate as a compromise (given that the post office is absolutely not going to *not* get in this business, from what I can tell). we encourage the idea of KEY FREEDOM this would be a heading for the idea that we are in support of the (our) government creating cryptographic infrastructures and key authentication services, as long as we always have the total freedom to encrypt according to however we please in private communications. in other words, we are willing to have an official state identity/key as long as it is not required in our private transactions, only those involving the state. (yes of course I know "state" is a pornographic word here, heh). if you don't like this imagine it as a "stopgap measure" on the way toward full cryptoanarchic infocalypse that government bureacrats might buy. another idea is that we might reasonably support a system that has such a thing as "key escrow" but we only use the keys they give us as part of our signatures to other people if we want to reveal our "official" state identity, not to encode the communication itself. in this way someone else could verify your identity for e.g. legal/ contractual purposes, but the overall communication would remain private. in other words, we agree that the government does have the authority to link people to their "official numbers", but we have a choice about when to use those official numbers in any private communication, and by law businesses do not ever have to *require* authentication in this way. the numbers of course would be required in communication between the individual and government. the situation is that the government *now* requires that it knows who we are when we communicate with it in any official context. therefore I submit that the above system would not take away any rights, and in fact might lead to privacy advocates being able to use a massive government key-infrastructure but still retain communication privacy. in other words, you now have the government actually supporting your cryptographic freedom by giving you a massive "official" key distribution system you can use any way you like. another possible compromise is that by default, keys would be insecure, in the sense the government stores them for "key escrow" purposes, but people are always recognized as having the right as "tunneled encryption" (a great term for private encryption within the state encryption). you see, cypherpunks often recognize that most of the world is so clueless that they don't protect themselves, and they almost don't deserve to have privacy by the default if they are entirely clueless or apathetic about obtaining. so what we might be able to accomplish is a system in which all the clueless people use the government-supplied keys, the FBI cracks some percentage of "clueless" criminal communication, and non-clueless people go ahead and bypass it all. now, before you hotly flame my eyebrows off, I say these things not because I like key escrow, but that I suspect the post office is going to move into certification no matter what, and the idea of key escrow is closely related to that. with a little finetuning the cypherpunk position could help define the actual rights of individuals relative to these new government systems in a way that is totally compatible with all our core privacy beliefs. what I am getting at is that we could twist the words "key escrow" to mean that the government provides some infrastructure for storing & accessing public keys (similar to phone books), and we could simultaneously vehemently deny that "key escrow" legitimately allows the government to actually *have* our secret keys. in other words, we say, "yes we support key escrow. of course it is a good idea to let the government have simple phonebooks of keys. oh, wait, you mean we have to USE THESE KEYS? in the official STATE ENCRYPTION ALGORITHM? we have to STAMP OUR SSN# ON EVERY TRANSACTION WITH EVERY BUSINESS? sorry buster, what I do with my key is my private matter. this would be again to having official government phones that allowed the government to call any number and start surveilling the room the phone is in."

2 1

Netscape, Mosaic, and other goodies.
by Laszlo Vecsey 17 Dec '03

17 Dec '03

> > > The field is User-Agent. However, blocking access to users of Navigator > > > isn't a particularly useful thing to do. If you must do something, why > > > not modify your GET handler to add a header to the start of all html > > > pages informing people of the problem, and suggesting alternatives. > > > > Great idea! I'm sure there is a cypherpunk on this list willing to write a > > patch to NCSA HTTPd to get the job done, in a configurable manor of > > course so that a template.html would be 'inserted' at the top of every > > document sent out to the specified browser. Any takers? > > No need. Simply add > > <meta http-equiv="Refresh" content="1;URL=netscape-warning.html"> > > to the start of your page. Netscape browsers will be redirected. Are you sure Netscape browsers are the only ones that currently implement this tag? Other browsers will be implementing it soon enough I'm sure. I think the only fool-proof way of doing it is at the webserver. Anyway, isn't 5 million bux a little too much for the government to give Netscape for the security improvements? I would think that for less than a million a group of programmers could be rounded up to create a stable multi-platform web navigator with VRML, MPEG, Audio, Postscript, and a zillion other features built in. :) It's funny how one day we are raving about how great Netscape is, and the next day we hate them. If we aren't pleased with a particular piece of software, instead of argueing about it we should just go and make one that we are pleased with. Using the many libraries available such as MPEG, GIF, JPEG for example and releasing it under the GNU agreement is the way to go. Or perhaps we should just back the original browser, NCSA Mosaic. With some improvements it could once again be the best browser on the net. I suppose I'm not clear about the implications of these eskrow keys... just because the government is supporting it, and Netscape will be implementing it doesn't mean that we have to use it. Is it against the law to encrypt data (using your own method) and send it over the Internet? I don't think so. ...

2 1

No Privacy Right in UK ? - Part 3
by James M. Cobb 17 Dec '03

17 Dec '03

Friend, A 12 01 95 The Electronic Telegraph newsstory headlined Policeman bugs own station by mistake reports: ...a listening device was found at the headquarters of Lothian and Borders Police in Edinburgh. The "bug", disguised to look like a plug adaptor, picked up the day-to-day business of the operations room, including radio and telephone messages and conservations between staff. Conservations between staff? Conversations in which not a word is wasted? Its presence was discovered when staff in a rest area tried to tune a radio to a different station and picked up the voices of their colleagues. I used to despise those who couldn't keep their hands off the dial for 5 minutes, but since reading this story my attitude's been adjusted. Concerned that secrets were being transmitted abroad, the force "swept" the control room with anti-bugging technology, only to find that the device belonged to them. It had been "planted" by an officer who thought it was a real adaptor. Of course I believe that! For what comes around...goes around. Cordially, Jim NOTE. The Electronic Telegraph website's URL: http://www.telegraph.co.uk The newsstory's by: AUSLAN CRAMB, SCOTTISH CORRESPONDENT Its online filename: 1bugs01.html

1 0

Re: DigiCash releases protocol specs!
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"support(a)marktwain.com" 1-DEC-1995 18:56:11.57 By popular request, DigiCash is releasing the protocol specs. The specs are available at http://www.digicash.com/ecash/protocol.html Please be aware that the doccument is work in progess. More specifications, including byte level descriptions of the message format will be added throughout the weekend. --Lucky Green at ---------------------- Thank you. This raises my likelhood of using DigiCash's electronic currency from about none to above that. -Allen

1 0

[NOISE] Fun quote
by Charles Gimon 17 Dec '03

17 Dec '03

Just heard on tonight's "X-Files"... "The NSA?? Since when did they start issuing you guys piano wire instead of guns??" I can hear the clatter of .sig files being updated all over the net.

1 0

Re: A "Warning Banner" for Netscape Navigator? Good idea!
by rah＠shipwright.com 17 Dec '03

17 Dec '03

It's been a long and interesting day... >Pull down the 'Options' menu, grab the 'Window and Link styles' >page, and change the default "home page location" from >netscape's to whatever you want. Oh. *Those* advertisements! I couldn't for the life of me figure out *what* Tim was talking about. I've made mine come up blank since the initial, "Hey, what do these twiddly bits in the Preferences command do...", session after the first download. You can also put up a type-it-yourself URL window on the browser window, which comes in handy now that you have to wait 10 seconds (on my dinky PB 180) every time you change code modules in 2.0b3 Netscape (like touching<!> the menu bar for the first time, or looking at the bookmark window)... Like I've said elsewhere, Netscape is hierarchical code trying to conquer a geodesic (a word I got from Bucky Fuller, through Peter Huber, just so I keep my attributions straight...) network. It ain't gonna fly, in the long run, folks. In that vein, could someone e-mail me the best non-netscape Mac browser, so I don't get HTML-nasties when I go play on the cactus machine? Anyway... Dave Winer(sp?), the Mac-Developer-turned-gadfly (speak not ill of the other gadflies, I always say...), talks about seeing some Netscape (sorry...) patches which actually *do* strip banner ads from various web-pages. I believe you have to tell it which pages, and what the banners' file names are, but I'm not sure. Don't know where *Weiner(sp?)* got it from... I seem to remember the name "Ad Stripper" but I could be imagining things... Of course, if that's the way this code really operates, simply changing the name of the HREF call regularly on the server side, which is probably done anyway, with all the web-management code showing up out there, defeats ad-filters of this kind completely... Obcrypto: Maybe these web-pages will send you nanocash (not mine, either, sorry, taken from one of the wearable-people at mobileworld, I'll look up their name, and get back to you. soon. I promise.) to watch their message? Also, could someone talk here about how easy it might be to spoof Java "byte code"? The Java presentation at this conference had a lot of hand-waving and reverent invocation of Whit Diffie's name, so it might not be trivial. Another feature of this presentation was a really splendid "subjective axis" chart showing how "powerful" Java is in comparison to say, client-server, HTML, and other "technologies". This chart reminded me for all the world of the famous "Pravda Charts" that Tufte likes to lampoon in "The Graphical Representation of Quantitative Information". Just so I keep my sources straight. Of course. To quote Prof. Tufte. "If it looks like a duck, ignore it." Or something to that effect. Maybe the word "waddle" was in the sentence. Maybe he got it from someone else... I'll get back to you on that. I really will... ;-). Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell The NEW(!) e$ Home Page: http://thumper.vmeng.com/pub/rah/ >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Re: Barring access to Netscape
by James A. Donald 17 Dec '03

17 Dec '03

At 12:32 AM 12/1/95 +0600, Ed Carp wrote: >If you want to bar access to your site from a Netscape browser, such >can easily be accomplished. If memory serves, every browser, when >connecting to a site, exchanges certain information about the client >with the server. One can gain access easily to that information. This would not be satisfactory in itself: Ideally one would like to bring up a page saying "Sorry, you cannot access that page because you are using a netscape browser: Click *here* for the sad tale of Netscape. > --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

2 1

update.250 (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message:

1 0

unwanted AIP mail?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Anyone else suddenly start hearing from these folks? > Date: Fri, 1 Dec 95 14:44:34 EST > From: physnews(a)aip.org (AIP listserver) > Message-Id: <9512011944.AA12171(a)aip.org> > To: physnews-mailing(a)aip.org > Subject: update.250 > X-UIDL: 817946091.001 > > PHYSICS NEWS UPDATE > The American Institute of Physics Bulletin of Physics News > Number 250 December 1, 1995 by Phillip F. Schewe and Ben > Stein > > TWO-BIT QUANTUM LOGIC GATES have been experimentally {...}

2 1

Utilize This Valuable Information and It Will Pay For Itself Right Away
by 61033134＠aol.com 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#000000"><FONT COLOR="#00FFFF" SIZE=3> UTILIZE THIS VALUABLE INFORMATION AND IT WILL PAY FOR ITSELF MANY TIMES OVER! That tiny little ad can make you wealthy! Have you ever bought anything from a classified ad? If you're like most, the answer is yes. It's a fact of life, that we as a society crave the need for information. The tiny little classified ad can effectively and efficiently deliver the information to a potential customer base that is mind boggling. A simple classified ad can fill your mailbox with orders or make your phone ring off the hook with interested prospects. Have you ever seen the same ad running over and over again in a paper? It's because it's making money. In fact the chances are good that it's in a whole lot of other papers also. Classified ads can and have made many people very wealthy. How do you think all those late night info-mercial millionaires started? ***Nationwide Newspapers V2.0 TM*** Powerful New Reference Software - The First of its Kind, Classified Advertising Tool! - Electronic Directory of over 3,600 newspapers! - Sources for Over 6,000 newspapers! - Daily, Weekly, Shoppers, Community Papers and More! - Find Hard to Reach People to Respond to Your Offer! - Advertise by City, State, Regionally, or Nationwide! - Statewide and Network Advertising, Including Pricing! - Discount Advertising Less Than $1 Per Paper! - Powerful Tool for Building Huge Downlines! - Save Time and Money with Network Advertising, 1 Call, 1 Payment & you're in 100's of Papers with Millions of Readers, at a Big Discount Over Individual Rates! SPECIAL FEATURE- Built in Sort Tool Enables Sorts by State, City, Circulation, Phone Number & More! Proof is in the Results! Here's just a few: " Thank you for your 3,600+ newspaper directory! We have built a downline of 1,800 people in 6 months & a check for over $12,000 using this directory to advertise! It contains the small town papers as well as the big ones so we can target the audience & stretch our advertising dollar. I recommend it for anyone in network marketing." S & J Linden, Sequim, WA " I just wanted to let you know how much your program has saved me time and energy, now I can place ads with ease. I think your program is simply one that anyone who has a business must have, because time is money." Andrea Hurst-Harry, Arlington, TX There is no doubt that this information can and will be a valuable asset to your business. It's the perfect product, at the perfect time, at the perfect price. We've seen similar information costing 100's of dollars. Companies charge these high fees because they know that people who understand the value of the information will easily pay for it. Our products are more advanced and we make them affordable. They say that information is power, well we look forward to supplying you with all the power you need for years to come! Price: Other companies marketing half the information we offer are charging $249 For a limited time , You pay only $49 plus shipping for this revolutionary new product. To Order Send to: S. Press PO Box 11511 New Brunswick, NJ 08906 ***Please Add $6 for shipping and handling Name:_________________________________________ Address:______________________________________ City:_____________________State:____Zip:______ Payment Method: __CHECK __MONEY ORDER Total Enclosed: $_49 + 6 =$55 _____________ </FONT><FONT COLOR="#000000" SIZE=3>

1 0

Re: Info on Netscape's key escrow position
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: IN%"jsw(a)netscape.com" "Jeff Weinstein" 2-DEC-1995 02:26:13.63 I had lunch with Jim Clark today, and explained the furor that was currently going on in cypherpunks and elsewhere. After lunch he sent me the e-mail that I've attached below to pass along. I think the gist of it is that if governments require key escrow, we will have to do it in order to sell our products with encryption into those countries. > If we as a company were to take the position that in no case will we allow > a government to get access to our encrypted messages, or refuse to allow > key escrow with our products, the governments of the world will quickly put > us out of business by outlawing the sale of our products in their countries. > The fundamental issue is how do we accommodate the requirements of > governments, while protecting our rights as citizens. > > None of this represents the position of Netscape with respect to what we > will do. But if we do not come up with a solution to this problem that is > acceptable to each government, we will not be able to export our products, > except with a short key length (e.g. 40 bit keys), and that will not be > acceptable to corporate customers in other countries. They will create their > own solution, and we will not be able to sell to a larger world market. In > fact, we could even be ordered by our own government to establish a key > escrow system for its use inside the US. ---------------------- I believe that the central question at hand is whether Netscape will incorporate mandatory GAK into any of its products if you have an economic (governmental purchase) rather than physical (governmental threat of violence) reason to do so. I would hope that the upcoming statement will clarify this position, and in the proper direction. -Allen

3 3

Re: y2k as ideological opportunity.
by Peter Trei 17 Dec '03

17 Dec '03

>[IRS collection mechanism collapses due to y2k problem] If such a thing actually happened, I strongly suspect they'd activate the contingency plan that was developed to maintain tax collection after nuclear war; a flat 20% sales tax, collected (I think) by surviving Post Office employees. Come to think of it, that might be better than what we have now.... Peter Trei trei(a)process.com Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

2 1

Re: y2k as ideological opportunity.
by Chip Mefford 17 Dec '03

17 Dec '03

>>[IRS collection mechanism collapses due to y2k problem] > >If such a thing actually happened, I strongly suspect they'd >activate the contingency plan that was developed to maintain >tax collection after nuclear war; a flat 20% sales tax, >collected (I think) by surviving Post Office employees. > >Come to think of it, that might be better than what we have >now.... > > Naw, its gonna be real simple and clean. The bid goes out, Billgatus of Borg brings in a crapload of DEC/NT partner machines, puts 500 programmers on porting the tasking and data to Office 98, retrains the IRS on Office, Slides right past Oct 1999 without a hitch, you bring up M$ money on yer desktop and yer Fed Tax Check goes straight to Redmond, who in turn pays out a percentage to their new partners, the Fed. The US of MS, hahahahaha luv chipper Zz zZ |\ z _,,,---,,_ /,`.-'`' _ ;-;;,_ |,4- ) )-,_..;\ ( `'_' '---''(_/--' `-'\_)

2 1

Re: GAK, Netscape, CyberDog, and you.
by Rich Salz 17 Dec '03

17 Dec '03

Bob, Please stop this habit of cross-posting to every mailing list; 999 times out of a thousand the resultant discussion helps neither list. And my god, five lists this time, at least some of which have over a thousand readers? NB: Followups redirected. /r$

1 0

McCain on the radio, 9/22
by Carl Ellison 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Sen. McCain is scheduled to be a guest on the Diane Rehm show, Monday 9/22 10:00-11:00, 88.5 (in DC) or 88.1 (in Balto). This show is carried elsewhere in the country, so I'm cc:ing cypherpunks. - Carl -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQCVAwUBNCKTuVQXJENzYr45AQGhgAP9EtpiDkBvUDp85cdvbX3dvQXSDBvbwte1 K0gGxWscycNWnTbrpSZVRZ/ud/rm4GY/oiUS5lZbebwfsvAejyihUPWKxK1FTaz9 dE3Zm9TLdn9hzZdK0X2PhUPsHCsymZtmVB+N5zrd1m7QAptM6vX+aOBHWAwWZBie lh8KTIV3TJk= =XizX -----END PGP SIGNATURE----- +------------------------------------------------------------------+ |Carl M. Ellison cme(a)cybercash.com http://www.clark.net/pub/cme | |CyberCash, Inc. http://www.cybercash.com/ | |207 Grindall Street PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2 | |Baltimore MD 21230-4103 T:(410) 727-4288 F:(410)727-4293 | +------------------------------------------------------------------+

2 1

John Gage's comments at Computer Security Day in Cleveland
by fc＠all.net 17 Dec '03

17 Dec '03

John Gave gave an interesting pitch for Java at the CSSI Computer Security Day sessions in Cl;evelan yesterday (November 30). Among his comments were: Java is not secure - it is "safe" He (John Gage) regularly downloads binary executables from the Internet and runs them on his workstation at Sun - (connected to the internal Sun network). Sun has terrible physical security - unknown people roam the halls at night all by themselves. In 2 years, you will be able to buy a computer that does more than a Sparc now does, in a portable package the size of a cell phone, with more than 30 million bits per second of mobile bandwidth direct to the Internet, for less than $30. -> See: Info-Sec Heaven at URL http://all.net/ Management Analytics - 216-686-0090 - PO Box 1480, Hudson, OH 44236

1 0

Re: Getting a copy of the Jim Clark speech
by James A. Donald 17 Dec '03

17 Dec '03

At 12:38 AM 12/1/95 +0600, Ed Carp wrote: >The only problem with this approach is that this will bite other >browsers that have started supporting the so-called "Netscape >extensions". More than one person has coded the Netscape stuff into >their pages because it gives the author more flexibility than the >standard 1.0/2.0 standards. And there aren't many browsers out there >yet that support 3.0. http://www.netmanage.com/ have a free browser that supposedly supports 3.0 -- I have not tested it yet, though I downloaded it a short while ago. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: ALERT: On Monday, call Congress to stop Big Brother amendment!
by Carl Ellison 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 02:47 PM 9/18/97 -0400, you wrote: >3. Say that you're calling to urge the Congressman to pass SAFE (HR695) > without amendments. Does that mean Goodlatte's original bill, or the bill as amended already by the National Security Subcommittee? I believe you should be more specific in your instructions -- suggesting that people ask for the bill to be voted against unless it is exactly as it was prior to the Natl Sec involvement. ..or, assuming it's going to be amended and we can't stop that, ask people to ask for a vote against the bill -- not for it. I'm worried that the person on the phone will check the box under "vote for" and not puzzle out the amendment level. If bills changed number when amended, this wouldn't be such a problem -- but as it is, I really worry. - Carl -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQCVAwUBNCKoDVQXJENzYr45AQEYwAQAh3Z5IDymS1G44qi1B0HdlVEAtmZHwhum 4KrINQpJW/pX37QCiiAklLpsvkBP2MAvGTB5HMfhBTdwzWqXfDZ6ZS2WTem3HIti CYrNvenIhfwQpAmzspCjTo6rXgExxKF96d++AescmmWUJRcA5LkqwI7HeBZkq4qb EcxDhF6SYkk= =AEyU -----END PGP SIGNATURE----- +------------------------------------------------------------------+ |Carl M. Ellison cme(a)cybercash.com http://www.clark.net/pub/cme | |CyberCash, Inc. http://www.cybercash.com/ | |207 Grindall Street PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2 | |Baltimore MD 21230-4103 T:(410) 727-4288 F:(410)727-4293 | +------------------------------------------------------------------+

1 0

NSC Announce
by wiltship＠iccu6.ipswich.gil.com.au 17 Dec '03

17 Dec '03

Thought this might be of interest.... From: ipSecure <ipsecure(a)ipower.nsc.com> Subject: iPower home page/CryptoSampler announcement Date: Fri, 01 Dec 95 15:53:55 PDT For Immediate Release Contact: National Semiconductor Lori Sinton (408) 721-2448 lori(a)ipower.nsc.com http://www.ipsecure.com CryptoSampler, from National Semiconductor, Demonstrates Ease of Building Secure Electronic Commerce and Communications Applications Company's iPower(tm) Business Unit Launches Free CryptoSolver to Inaugurate New Web Site SANTA CLARA, Calif., November 27, 1995 --- National Semiconductor Corporation today announced the availability of its CryptoSampler package for applications developers interested in gaining a "hands on" understanding of how cryptography solves modern business problems. Developed by National's iPower Business Unit, the program consists of three demonstration applications and the PersonaCard(tm) 100, a hardware token for personal, portable data security. The package contains both the demonstration applications including "build-it- yourself" tools to integrate security easily into electronic commerce and communications applications. Priced at $129, the CryptoSampler package is available to the first 1,000 U. S. respondents and can be ordered directly from National's iPower Business Unit. In a related move, the company's iPower Business Unit launched its own web site along with CryptoSolver, an interactive game that invites participants to solve encrypted messages based on the concepts of substitution ciphers and the alphabetic frequency table. CryptoSolver, a technology-teaser game rates players' deciphering skills and can be downloaded from iPower's new web site free. "As networks become the lifeblood of corporations and the principal means of commerce, securing electronic transactions and proprietary information over public and private networks is absolutely critical," said Tom Rowley, marketing director for National's iPower Business Unit. "Through this program, we hope to help broaden individual's understanding of how modern security technology can solve real problems on the Internet and in Electronic Commerce business applications," Rowley explained. CryptoSampler Package - Token Plus Three Applications in One ------------------------------------------------------------ The CryptoSampler package consists of a PersonaCard 100 data security token, a floppy disk containing all three demonstration applications, a cryptography primer written by recognized cryptography expert Bruce Schneier, and a questionnaire. Customers who choose to complete and return the questionnaire, will receive a free copy, while supplies last, of Bruce Schneier's newly-released book, Applied Cryptography, second edition. o PersonaScreen(tm) System Lockout Utility is a screen locker that prevents unauthorized entry into a personal computer by locking the keyboard and mouse. The PersonaCard Token, implemented in the PC Card (formerly PCMCIA) Type II format, locks and unlocks the desktop computer. o PersonaSecure(tm) Word Utility enables users to sign, seal (encrypt, decrypt), and verify documents as well as e-mail messages from within Microsoft Word 6.0 for Windows. Installed automatically, PersonaSecure displays a toolbar that corresponds to the functions of National's PersonaCard data security token. The hardware token incorporates RSA's industry-standard digital signature and encryption formats which are now "token aware." In addition to protecting and validating Microsoft Word documents, users can encrypt and decrypt e-mail messages with others who have installed the PersonaSecure Word Utility. o PersonaDLL Library for Visual BASIC 3.0 is a Dynamic Link Library (DLL) of routines that enables developers to quickly and easily develop their own applications incorporating high-level data security features. PersonaDLL includes a Visual BASIC application, Visual BASIC source code, and access to all of the features of the PersonaCard 100 token including digital signatures, RSA key generation, encryption, and verification. System requirements to run the CryptoSampler package are: Microsoft Windows 3.X, Windows for Workgroups 3.X, and a PC Card slot (version 2.1 or later). Microsoft Word 6.0 is required for the PersonaSecure Word Utility. Pricing and Availability ------------------------ The CryptoSampler package is available with or without a PC Card Reader. For those who plan to run CryptoSampler applications on a desktop or portable personal computer already equipped with a PC Card slot, the basic package is offered at a special price of $129 (including handling and shipping). A CryptoSampler package with PC Card reader is available for $199. The total retail value of the basic package and configuration with card reader is $300 and $500, respectively. To order the CryptoSampler package in either configuration, call 1-800-272-9959 Ext# 631 between the hours of 7 AM and 7 PM Central Standard Time. To play CryptoSolver and for more information about the CryptoSampler program, see the iPower web site at http://www.ipsecure.com . iPower Security Solutions ------------------------- Introduced a year ago, iPower technology provides the highest-level of commercially available security in a personal, portable hardware token. iPower solutions are already being incorporated by OEMs, ISVs, and VARs into a variety of applications and hardware platforms including e-mail and messaging, electronic commerce, network security, and secure access to on-line services including the Internet. National Semiconductor Corporation provides technologies for moving and shaping information. The company focuses on four key areas - communications, consumer, industrial, and personal systems. National Semiconductor is headquartered in Santa Clara, California, and has 22,300 employees worldwide. -30- Note to Editors: To receive a CryptoSampler package for review, call or e-mail Lori Sinton, 408 721-2448 or sampler(a)ipower.nsc.com iPower and PersonaCard are trademarks of National Semiconductor Corporation. All other trademarks are held by their respective companies Flight to Quality Wiltshire Productions Pty Ltd Brisbane, Queensland, Australia Intl Voice 61 7 3376 3535 Intl Fax 61 7 3279 4027 Email wiltship(a)gil.com.au PGP Key ID 3E584C7D PGP Fingerprint 01 03 FB F4 BE F8 2B F3 5D 84 6B 69 37 80 FE 10

1 0

The Ultimate Non-MLM Home Based Business:..
by 47173936＠11641.com 17 Dec '03

17 Dec '03

Me: "Do you own a personal computer?" You: Yes... Me: "Running Windows ver 3.xx or 95?" You: Sure. Why? Me: "Wanna' make $10,000 cash in the next 60 to 90 days?" You: Who wouldn't? Me: "Without leaving home?" You: Really? What's it about? Me: "I own a software program that explains the business? Do you want to download a FREE evaluation copy?" You: Are you going to tell me what it's about? Me: "That's not the way I work. The answers are in the software. Do you want to download it?" You: Looks like I've got nothing to lose. OK! Where is it ? Me: "Just click here: ----> http://207.213.38.77/megaresource/ or if by chance you are unable to download it, just call 714-280-0996 and I will email it to you and if that won't work; I will mail it to you on disk." You: Ok. Works for me. To learn about promoting your product, service or income opportunity with email marketing, please call 714-280-0996. If you are not interested in home business opportunities, you can be removed from my mailing list by sending an email to removemega(a)usa.net No subject line or message is necessary, simply send it and you will be automatically removed from my mailing list.

1 0

Re: Talking to Jim
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Sat, 2 Dec 1995, PeterWiltshire wrote: > Gidday all > > I emailed Jim Clark day before yesterday about his comments re key escrow. Uhhm, what is his email address?? I'd love to ask him one or two questions, not just about key escrow, but about Netscape's future prospects and its current stock valuation. (Netscape now has a market capitalization larger than Apple Computer.) > He responded. As it's not good form to post private email, might I suggest > that one of the 'elders' here put to Jim a list of questions on the proviso > that his answers can be posted to the list. You never know, a lot of > speculation might be confirmed or denied. I've got some questions ... Mathew Ingram, reported in the Investment Reporter that Jim has stock holdings currently worth more than $1 Billion in Netscape, and yet Jim was quoted as saying at a recent technology conference "you could argue there's something of an Internet bubble developing." The article also quoted him as saying that if Netscape made a profit in the next year or two it would only be "because we miscalculated." Miscalculated?? I'll say. If he thinks that GAK will go down with great support, when they want to split their stock, then they're really not quite aware of the mind of the organization that they'll be up against. I wonder what people will have to say about Netscape, then. Right now, brokerage firm Hambrecht & Quist is estimating that in five years the Internet will be a $23 Billion market -- equal to the size of the _entire_ software industry today. And a money manager at Franklin Resources Inc. said, "some people are suggesting the big tech company in the next century could be Netscape." Personally, I don't think so. But then who am I?? Goldman Sachs just put Netscape on its "recommended" list. And some analyst called Michael Parekh was quoted as saying that Netscape could hit $200 in the next two years. That it was going to be the Microsoft of the Internet -- dominating the software side of the World Wide Web. I wonder if Parekh's valuation is a pre or post stock split evaluation. Shoot, if Parekh is talking about $200 post-split ... then Netscape could well become a really big league play in this game far sooner than most people think. I'd love to hear how this fits with Jim's words of a "bubble". The market seems to "think" that it's a better present judge of what Netscape has than he does. It's almost as though the "market" has developed a "mind" of its own. It's own particular neural network. It doesn't seem like the market is paying attention to any of Jim's warnings or words. His "opinion" -- like all corporate officers opinions are strongly discounted and very lightly weighted. It's almost as though there is automated software at work. Some people might think about going short against the box on this one. Although the article talked about a short "squeeze" which would generally mean that this stock is going to go nowhere but up as the short sellers try to cover, personally, I might start to take some money off the table and not add anything to my position. But all this depends on the depth of someone's pockets, I guess. And on some serious trading analysis. Then again, there is that old adage about never fighting the tape. It's compared frequently to whizzing into the wind, I think. Probabilities and such. (Disclaimer: This is not intended as and should not be considerred as investment advice ... or for that matter as whizzing advice, either.) I'd love to hear Jim talk some more about this. For me, all of this Netscape stuff is getting way too surreal. It seems really strange. Some people are arguing that things are getting out of hand, and yet it seems like this one is completely out of Jim's control. No one is listening to ANYTHING from Netscape at all. The market is simply listening to its own internal dialogue. And that certainly is a surprise to this writer. It's a surprise to me, and it's probably a surprise to Netscape. Finance 501 is more complex than Finance 101. Maybe they should read up about the privatization of BP and the involvement of the KIO. Or learn a bit about Li Ka-Shing, or something which adds to their knowledge base. That might give some idea about what is actually going on here. (Not that the Kuwaiti Investment Office or Li-Ka Shing has an interest in this one.) Alice de 'nonymous ... ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

1 0

SHU_tup
by John Young 17 Dec '03

17 Dec '03

12-2-95. NYPiper: "Accord Reached For Limiting Smut on Internet." Page One lead. Bowing to a seemingly unstoppable push in Congress to keep sexual material off the Internet, a coalition of commercial on-line services and some civil liberties groups agreed today to accept a number of restrictions they had opposed a few months ago. "Terrorism Bill Plan May Break Deadlock." Tiny article. In a bid to salvage a stalled antiterrorism bill, the chairman of the House Judiciary Committee has agreed to the demands of conservative Republicans to remove proposals expanding the Government's wiretapping authority. SHU_tup (10 kb)

1 0

Re: sooner or later
by Anonymous 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Stewart wrote: >At 10:45 PM 9/18/97 -0700, Wei Dai wrote: >>Many of us believe that a crypto ban is inevitable. The only >>question for us is whether it'll happen sooner or later. Seen in >>this perspective, all that industry and civil liberties lobbies can >>do is delay the ban. But is this necessarily a good thing? >Yes. Later is bad, but sooner is worse. First of all, "Soon" means >"We lost already", while "Later" means "We haven't lost yet, even >though it looks pretty much like we're going to lose later,... Even if we lose a battle legislatively tomorrow, this does not mean we have "lost". In practice, people can still write code and distribute it, the same way people are still making LSD, growing mushrooms, or growing marijuana. Code propagates easily which means that so long as there is any place in the world where it can be safely used, it will be. Even if it is illegal throughout the world, there are going to be places where the local administrators are too corrupt or incompetent to really enforce the law. (The law is more or less impossible to enforce anyway because you have to charge people with possession of random data.) This means that somebody will be using the stuff, and the New Renaissance will still happen, but the benefits will have to propagate back into the United States for a change. The greatest risk is of a major government going "ape" over this issue and randomly persecuting those they suspect of doing illegal arithmetic without real evidence or real trials. The passing of a law may mitigate this because they will feel as if they are doing something, even if the "problem" was not entirely solved. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.html -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNCKgi5aWtjSmRH/5AQF5Bgf/UWVTAU8Mk4g8QMX7ya1OnMPbbQvH14wE Lq2Lr+FKYYjQLRTH3UYMPjl+mxXJWhnIxGrK6SNSE3kh+InRpzX1jPtGBpYVXq/9 fr1YgkzjUilcN5dHRxwAO4ciwFmTu0ZCHORhk90DcnwQOBdckXN5ykjGZ3CTGEQA IXrhnV6sK3Ovuxe73WSuaZ+lOUPCMs4SVvnKIeWb4JWy0L3j4YwsmYu0aVVqNAeg Kd2sXYqaBxnitXFg+KTppcW16k9AqSMbFK5+Go3dIM1wZOI8kJKBTE9+Iw6u/zff tvZGXJWGRHB4e4VRf+OAttaP7Aalqx83AHMXe6WhhDUFqXJ7WmhkQw== =UOyl -----END PGP SIGNATURE-----

1 0