December 2003 - cypherpunks-legacy

SSZ status
by Jim Choate 17 Dec '03

17 Dec '03

Hi, SSZ seems to be stable since the power was restored where my ISP was located. There should be no further service interruptions expected. Jim Choate CyberTects ravage(a)ssz.com

3 2

US grants export license for PGP
by Lucky Green 17 Dec '03

17 Dec '03

http://www.news.com/News/Item/0,4,11048,00.html?ticker.ms.ie40 PGP crypto approved for export By Tim Clark and Alex Lash May 28, 1997, 7 p.m. PTThe U.S. government has granted an encryption export license to one of the biggest thorns in its side. Pretty Good Privacy says it has won approval to export strong encryption technology overseas. The license allows PGP to export technology up to 128 bits; the government's regular licenses only allow up to 56 bits. To date, the government has only approved 128-bit encryption exports for technology that protects financial transactions but PGP technology can encrypt any kind of digital communication. PGP was founded by cryptographer Phil Zimmermann. Zimmerman became something of a cause celebre when he posted his PGP technology on the Net in defiance of laws prohibiting international distribution of encryption technology. Zimmermann came close to going to jail before the government dropped its case against him. The company said tonight that it counts more than half of Fortune 100 companies use its email software. PGP still has another old foe to worry about. Encryption software giant RSA Data Security earlier this month filed a patent infringement lawsuit against PGP. The suit alleged that PGP is unlawfully using RSA technology licensed to Lemcom before its merger with PGP in 1996. PGP officials say RSA's claims are without merit. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred

7 8

motherboards with multiple CPUs
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

I am looking for a place to purchase a motherboard with several cpu slots and a lot of memory. does any one know where one can find a good deal?

4 3

Forward: Tim McVeigh trial info from RISKS DIGEST 19.19 (fwd)
by Paul Bradley 17 Dec '03

17 Dec '03

The following may be of interest to those following the Tim McVeigh OKC trial, it relates to technical flaws in the evidence relating to the telephone debit card McVeigh allegedly used. Datacomms Technologies data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: FC76DA85 "Don`t forget to mount a scratch monkey" ------------------------------ Date: Wed, 28 May 1997 11:47:43 -0700 (PDT) From: hbaker(a)netcom.com (Henry G. Baker) Subject: Oklahoma bombing trial transcripts RISKS readers may find the following transcript from the OK bombing trial to be particularly interesting: http://www.cnn.com/US/9703/okc.trial/transcripts/may/050697.eve.txt (Note CNN's Y2K problem, but that's for another time!) This transcript was brought to the attention of another usenet group due to its details of how the debit-card business works. The bulk of this transcript deals with the testimony of a Mr. John Kane, an executive of the company that handled the telephone debit card that was allegedly used. Problems: There was no one computer that had all of the information necessary to connect a phone debit-card number, the phone number from which a call was made, and the phone number to which the call was made. 3 different logs from 3 different computer systems whose clocks were not synchronized must be related in order to determine this information. Therefore, it is difficult to relate the logs in an unambiguous manner. Furthermore, the logs indicate only a physical port number, and the only way to determine the correspondence is to _physically inspect_ the connectivity of the cables. Q. How often were the cables rearranged? Since the system would work fine with a different permutation of the cables, what assurance do we have that the cables had not been rearranged by a technician who many never have told anyone, or not even realized himself? Due to the large sizes of these files (2.5 billion calls!), the 'matching' process allowed for +/- 4 minutes 'slop' in comparing the clock times of the different logs. Q. Did they take into account Daylight Savings Time (especially given the problems we're recently been talking about)? Q. Did they take into account the fact that on different days the clocks may have had different discrepancies? There are key items missing from the most important transaction log. This is because this computer was _intentionally rebooted_ 3 times every day (perhaps at midnight, 8AM, 4PM, all Los Angeles time). Each time the computer was rebooted, some transactions were lost; whether from not having been saved from the write buffer, or not being logged during a length boot process, was not made clear. Apparently, a very critical phone call was one of the transactions that were not logged due to this rebooting. (What are the chances of this??) Why was this computer rebooted 3X per day? Because it had apparently been crashing of its own accord prior to this, and those crashes had been very inconvenient, so it was decided that purposely rebooting would result in fewer complaints. This rebooting may have resulted in a slight loss of revenue, as well, as the missing calls may never have been logged. There is a presumption that if a PIN (in this case a 14-digit PIN) is being used, that only one person could possibly have used it. However, apparently this system did not check to see that multiple people (perhaps in different parts of the country) were not using the same PIN number at the same time. (Unlike many prepaid phone cards in Europe, there is no physical card to plug into the phone -- the _only_ proof of identity is the PIN.) Henry Baker ftp://ftp.netcom.com/pub/hb/hbaker/home.html

1 0

Interesting Web Site for Data Protection
by Robert A. Hayden 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I happened across this web site today. I was kind of impressed with its innovative approach, although I doubt I'd need these services. http://www.atrieva.com/ Just FYI, in no way an endorsement or anything. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: PGP Signed with PineSign 2.2 iQCVAwUBM4zm+TokqlyVGmCFAQEnxwQAh/GfjR4lGi2rzFiJCj2dgpWtbYbXhf2O 7yAGdWt9d819xhOlLC7Zmcq3QS7WJhJOYuGyPEYZRX5hCR8cgoBo9cul9+tFyvVZ KfQCUUV/rCVPEYBzLyDYrbPT8/IGbCGogvSqKKVlVKHGM8yscdf5Z/aC+nyEUGd4 WsivjiDVzMg= =XqwC -----END PGP SIGNATURE----- Robert A. Hayden hayden(a)krypton.mankato.msus.edu __ -=-=-=-=-=- -=-=-=-=-=- \/_ http://krypton.mankato.msus.edu/~hayden/Welcome.html \/

1 0

EXTRO-3: Extropy Institute's Third Conference on the Future (fwd)
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

----- Forwarded message from Alexander 'Sasha' Chislenko ----- >From cpunks(a)manifold.algebra.com Sun Jun 1 02:24:20 1997 Message-Id: <3.0.2.32.19970601030136.016359d0(a)netcom.com> X-Sender: sasha1(a)netcom.com X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.2 (32) Date: Sun, 01 Jun 1997 03:01:36 -0400 To: (Recipient list suppressed) From: "Alexander 'Sasha' Chislenko" <sasha1(a)netcom.com> Subject: EXTRO-3: Extropy Institute's Third Conference on the Future Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-cypherpunks(a)toad.com Precedence: bulk Hope you may be interested... -------------------------------------------------------------------------- E X T R O 3: Extropy Institute's Third Conference on the Future August 9-10 1997, Doubletree Hotel, San Jose, CA Saturday (Aug 9) theme: The Future of the Body and Brain. Sunday (Aug 10) theme: Future Infrastructure. The conference will include presentations by Eric Drexler - nanotechnology pioneer and chairman of the Foresight Institute, Gregory Stock - Author of "Metaman", Kevin Kelly - executive editor of Wired, Max More - President of the Extropy Institute, Mark Miller - founder of Agorics, Inc., Chris Peterson, Sharon Presley, Sasha Chislenko, Robin Hanson, Anders Sandberg, and others, as well as panel sessions devoted to progress in Artificial Intelligence, Investing in the Future, and Future of Gender and Sexuality. Extropy Institute functions as a networking organization bringing together scientists, technologists, entrepreneurs, philosophers, and artists who share certain general interests including: extending life span, augmenting intelligence (both cognitive and emotional), gaining access to space, and achieving control over our own biology through genetic engineering, bioengineering, neural-computer interfaces, and molecular nanotechnology. We welcome all interested members of the public to attend and participate. Past speakers have included Marvin Minsky of MIT, Bart Kosko - fuzzy logic and neural network pioneer at USC, Roy Walford - leading gerontologist at UCLA, Hans Moravec - Director of Carnegie-Mellons Mobile Robotics Lab, Michael Rothschild - author of Bionomics, and Ralph Merkle - nanotechnologist at Xerox Parc. For more information, please visit <http://www.extropy.org/extro3.htm> or call (310) 398-0375 and leave your mailing address or email address, or send email to more(a)extropy.org ------------------------------------------------------------------- Alexander Chislenko <http://www.lucifer.com/~sasha/home.html> Great Thinkers page: <http://www.lucifer.com/~sasha/thinkers.html> ------------------------------------------------------------------- ----- End of forwarded message from Alexander 'Sasha' Chislenko -----

1 0

No Subject
by glendale＠clear.net.nz 17 Dec '03

17 Dec '03

__________________________________________________________ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ glendale(a)clear.net.nz |"`-/"|_.-'"``-._ o o `; -._ )-;-,_`) = v_,= _ )`-.\ ``-' Lamb Laidir an uachdar _.- _..-_/ / ((.' O ((,.-' ((,/ -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.2 mQEdAzOKldMAAAEIAO64pUwrhsn5ggVG3Y+kORuGoOVFgBOKJB8dP0FRIc31cQIV JHzHh1fYMnkSPPrjofLwMZgJeMiEBeZrtR5tz4Z43vQgmprF67Tq0SL5ecBnHtf7 3xaTl4hTy1CZEAFyrGOnSn3NYdopc+gm55UXgMwlTDckKJCthwLkxlOgc4p1Ry1d rgLBHPSCz+SXxwfwxiHcxscjRvECmhPrw7eqq9RhwEk/PIQk/8RVBYEM3E/t8vG2 ObpgDWTvJRBqZjEtpAHjCPBbEY+thbwynSVtN252Zp9Fiy4/DFkc3/NXTa81nrwY 6FoqAjIdUuqfIl65p/NvM8tSoCCt65/dX0UlWOkAhAgAAAAAAAAAAAAAAAAAAAAF tCREYWxlIE8nQnJpZW4gPGdsZW5kYWxlQGNsZWFyLm5ldC5uej4= =uqqS -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: OECD attacks one of the Four Horsemen
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

TruthMonger wrote: >There will be a "War on Porn" on the internet that will mirror the >"War on Drugs" currently taking place. In financial, as well as freedoms, cost. >All that the government wants is their piece of the action. Like >drugs, the porn will always be available, but the price will >fluctuate according to the level of government control and/or >illegality. Yup. Like drugs, "intelligence" agencies will also get <ahem> intimately involved, and then deny it, in a romantic tradition dating back before language. >The "War on Porn" will turn into another essential national industry >which will become part of the GNP. A negative part. Tax-spend. Spend-tax. >The "winners" in this war will be the journalists who have covered >the "War on Drugs" as they will merely have to dust off old stories >and substitute "Porn" for "Drugs" wherever it occurs. The real winners will also be in a strange quarter. The Playboys and Penthouses of this world are concerned about profit, not morality, but they will be perfectly willing to surreptitiously line up with the Christian Coalition on this one. Strange bedfellows. >The "loser" will be the Hoover Vacume Cleaner Company, whose development >of Virtual Cathouse technology will fall victim to new legislation. Old Woody Allen movies, anyone? om

1 0

MIDI files galore and much, much more!!
by PROKILL＠axp.cmpu.net 17 Dec '03

17 Dec '03

You'll just love it. Click on it now, don't wait, bookmark it and keep checking it out for great deals to come. "http://www.angelfire.com/ky/PROKILL/index.html" Please forgive me for this e-mail, but I felt I just had to let more people know about this great web page. This page has many wonderful and exciting things on it. More will be added daily! Bookmark it! Roach Exterminator Kills Waterbugs, Silverfish, and Ants. Where they travel and in their nests. Is an oderless white powder. This formula was proven to be 100% effective against Cockroaches and Waterbugs by the University of California over 30 years ago. Supplied in 4 oz. containers, enough to treat several average houses. The sprays all really useless when compared to this product. The ULTIMATE goal is to eliminate roaches completely, but sprays just don't kill the cockroaches' eggs. Follow use and safety instructions supplied with products. Total cost is only $2.05 plus $2.95 for shipping and handling. For each order, send $5.00 to: PRO-KILL 79 Rose Marie Drive Elizabethtown, KY 42701 Online Ordering is available at: "http://www.angelfire.com/ky/PROKILL/index.html" GURANTEED to work!! Guranteed to love the webpage! The new web page at "http://www.prokill.com/" will be great. It is not working yet. We are making a deal to also have CD-ROMs (not XXX) for sale. Send us email at: "mailto:roachkill@prokill.com" The web page has some net MIDIs. To get off this list send email to remove(a)prokill.com. Thankyou, very much for your time and may GOD bless you.

1 0

[CRYPTO] Zero-knowledge commit
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Timmy `C' May proves that the Midwestern gene pool needs some chlorine in it. <<<< o(0-0)o -ooO-(_) Ooo-- Timmy `C' May

2 1

Los Angeles Police Department Web Site Hacked
by se7en 17 Dec '03

17 Dec '03

It was hacked late last night at http://www.lapd.org I have it mirrored at http://www.dis.org/se7en se7en

1 0

pathology
by Secret Squirrel 17 Dec '03

17 Dec '03

This was taken from the Alameda County District Attorney's Office publication "The Point of View": In a murder trial, the defense attorney was cross examining a pathologist. Here's what happened: ATTORNEY: Before you signed the death certificate, had you taken the pulse? CORONER: No. ATTORNEY: Did you listen to the heart? CORONER: No. ATTORNEY: Did you check for breathing? CORONER: No. ATTORNEY: So, when you signed the death certificate, you weren't sure the man was dead, were you? CORONER: Well, let me put it this way. The man's brain was sitting in a jar on my desk. But I guess it's possible he could be out there practicing law somewhere.

1 0

How much you lose under Social Security -- socialsecurity.org
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 30 May 1997 10:59:17 -0700 (PDT) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: How much you lose under Social Security -- socialsecurity.org I'm over at the National Press Club now, just came from a Cato Institute press conference unveiling their socialsecurity.org web site. It lets you calculate your retirement income and compare how much you'd get from the Federal government's Social Security "fund" compared with a private system like a 401(k). And it's fun to play with. Let's say I was born in 1970 and make $30,000 a year (BTW, I wasn't and don't). Assuming I retire at 67 and inflation is 3 percent, Social Security would give me $1,293 a month after I retire. And that's if you assume Social Security won't go belly-up, a hard position to maintain since its own trustees say it's underfunded by 25 to 33 percent. Compare that to a stock fund, which yields so much more: $8,635 a month. I can't think of a better argument to privatize Social Security and move to a system like an IRA or 401(k), a solution the Cato folks have advocated for years. Before the big government folks out there criticize Cato's calculator for being biased, let me point out KPMG Peat Marwick did all calculations and programming. -Declan

6 7

The Wassenaar Arrangment
by John Young 17 Dec '03

17 Dec '03

Thanks to Greg Broiles's FOIA effort and Lucky Green, we offer the first US public release of: The Wassenaar Arrangement - List of Dual Use-Goods and Technologies and Munitions List, July 1996 http://jya.com/wa/watoc.htm This is the 200-page document Greg previously announced here which lists in minute detail the wide range of goods and technologies to be restricted by arms and trade export controls. The Wassenaar Arrangement succeeds COCOM as the arms control regime signed by 33 nations. Cryptography is covered in Category 5 - Part 2: http://jya.com/wa/wacat52.htm Which may be compared to the Australian version: http://jya.com/aucat_5.htm

1 0

Re: 1996 Wiretap Report
by Jack Flap 17 Dec '03

17 Dec '03

Eric Blossom <eb(a)comsec.com> may have written: > (2) In the past 11 years (1986 - 1996) a total of 9,912 intercept > applications were approved. Of that number 5 (five!) were for > "Arson, explosives, and weapons." Unless they've classified wiretaps > against "suspected terrorists" in the "Other" category, it looks > as if the LEOs don't think (targeted) wiretaps are useful for stopping > small groups of modestly skilled people bent on blowing things up. No Shit. Hmmm. :-) I guess the spook angle is to ensure that those are <cringe>well targetted</cringe> wiretaps - targetting based on intelligence, which is probably not the same as legal intercept... Jack. --------------------------------------------------------- Get Your *Web-Based* Free Email at http://www.hotmail.com ---------------------------------------------------------

1 0

Re: May's Banal Rant
by Marc Rotenberg 17 Dec '03

17 Dec '03

I just came back from the 7th annual crypto conference that we've organized in DC. Among the people who spoke were Carl Ellison, Eric Hughes, Matt Blaze, Peter Wayner, Cindy Cohn, Bruce Schneier. (Michael Froomkin was invited, but he's been out of the country. And Whit couldn't make it cause he's finishing his book.) Like I said, Tim May et al are behind the curve. You guys preach cyber anarchy but you're really armchair activists. Marc. - For anyone interested in getting the most recent EPIC Crypto Privacy Sourcebook, we should have a notice on our web site by the end of the week.

3 2

GAK
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

May Timothy Maypole's forgeries get stuck up his ass so he'll have to shit through his filthy mouth for the rest of its miserable life. .::7777::-. /:'////' `::>/|/ .', |||| `/( e\ Timothy Maypole -==~-'`-Xm````-mr' `-_\

2 1

There's something wrong when I'm a felon under an increasing number of
by TruthMonger.tm＠dev.null 17 Dec '03

17 Dec '03

Tim May wrote: There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway." Tim's new sig-line gives recognition to one of what I consider to be the two main reasons that Democracy and Justice can now be considered a part of America's historical past. A major nail in the coffin of Justice for any accused in the U.S. was when the justice system promoted the concept of guilt by virtue of "circumstantial" evidence to the point where people can now be convicted as a result of speculation rather than evidence. Prosecutors now seem to need only to convince the sheeple that it was "possible" for the defendant to have commited the crime and that circumstantial evidence points *only* to the accused. As well, the justice system only allows the government prosecutors to indulge in "speculation" and denies the defense the opportunity to do the same. The McVeigh prosecutors are allowed to put on a key witness who has openly stated that he's going to get rich by telling fables, yet the defense's witnesses are barred from testifying because the judge declares their testimony to be unreliable and the defense's planned defence to be based on speculation. Now that this nail has been driven home, the only thing standing between the average citizen and random or targeted unjust imprisonment is a cause of action for the government to proceed on. Tim C. May's sig-line eloquently points out that the black-robed magicians of the justice system now have enough cards strategically put in place to be able to pull an Ace of Subpoena's seemingly out of thin air. If a perfectly normal, average grandmother/citizen can be threatened with imprisonment for putting money in someone else's parking meter then, pray tell, which action of the average citizen *cannot* be used to imprison him or her? The Pandora's box of laws, regulations and "perceived possibilty of illegality" (probable cause) leaves each of us open to random or targeted search, seizure, arrest and imprisonment not only for laws and crimes which actually exist, but also for those which can be deduced by "speculation" as to the "possibility" of our having had an "intent" to do something illegal. (Twenty years ago I called my lawyer at four a.m. and he asked me what charge the police were using to hold me. I told him, "I think the charge is 'Suspicion of being in jail.'" He laughed and said, "They may *have* you on this one, Bubba." Back then it was a joke, but I fear that today it reflects reality.) A grandmother in the midwest U.S. plugs someone else's parking meter and faces prosecution and interrogation. She mentions she was on her way to pick up paint for a shed being built in her back yard. It turns out she has no permit to build a shed on her property. The zoning official who inspects her house for further malefeasance sees a gun (hunting rifle) in a closet and a line of a white, powdery substance (roach poison) on a kitchen counter. Police search the house and seize the computer as evidence. The woman's son has his cypherpunks list messages on the computer, including Jim Bell's AP/IRS posts. What was the woman doing in plugging someone else's parking meter? She was attempting to prevent the government from collecting money from a citizen by way of a fine for not paying his/her parking tax. Her proven "link" to Jim Bell, terrorist and tax protestor, can be seen as evidence of a "conspiracy." (The question now becomes one of whether she will testify against Bell in return for a reduction in her charges, or whether he will do so against her.) If you consider the above to be in the least far-fetched then you have little understanding of the working of our present-day justice system. If you consider the above to be an unlikely scenario even if the woman was being *targeted* for prosecution then you are totally out of touch with the reality of the current state of the justice system in America. There's something wrong when I'm a felon under an increasing number of laws. No matter how much anyone attempts to minimize or justify Tim C. May's statement, it is undeniable that the government currently has virtually unlimited power to accuse, convict and imprison its citizens. The IRS is the prime example of this fact. It has long been a known fact, admitted even by IRS officials, that it is impossible for any citizen to completely comply with the country's tax laws over a period of years. What is even more disturbing is that interpretation of the tax laws lies largely in the hands of the IRS, not in the justice system. Add to this the fact that despite having acted in accordance with the legal judgement of an army of tax attorneys, the guilt of any "crime" falls on the citizen and we are all potential felons. Not only this, but with the plethora of legislation covering every aspect of our activity in our private lives and in our interactions with society, most of us are likely guilty of a multitude of potential felonies. Of course, only *bad* people have reason to be fearful, right? Only those who cause *trouble* need fear being *targeted* for prosecution, right? This is of no concern to the average citizen, such as yourself, right? Right. As long as you watch what you do and say so that you give the government no reason to label you as a troublemaker, then you have no reason to fear. As long as you make certain that you have nothing in your life that can even give the "appearance" of connecting you to the *bad* people, you will be safe from government persecution. The price to pay for guaranteeing your freedom is small. Quit hunting and sell your guns. Get rid of white, powdery substances such as roach poison, sugar, flour. Never fail to signal for a turn. Always wear your seat belt and drive 55 mp/h. Never wear jeans or pay cash for an airline ticket. Never read "The Turner Diaries" or "Assassination Politics." Which reminds me... Unsubscribe from the cypherpunks list, physically destroy your computer and never chew gum in a courtroom. (Twenty-four hours in jail for contempt of court in Phoenix, Arizona.) Now that you remain at home and have no contact with the outside world except to meet all of your legislatively mandated requirements as a citizen the only thing you need to fear is what the government *already* has that they can use against you if you become a "target" of prosecution. Cynical? Moi? 1984 came and went with society by and large dismissing the book, "1984," as having been realized in actuality. I was mystified as to how anyone, let alone nearly everyone, could fail to recognize that the seeds had already been planted to bring to fruitation almost every concept of Big Brother that was focused upon in the work. I believe that any rational person can see, in retrospect, that Big Brother was already a fact of life by then. However, it was of no concern to most of us because not only did it did not negatively impact us personally, but also because the arising fascist/police state/society seemed to have little potential to do perswrong when I'm a felon under an increasing number of laws. When cops are acquitted of beating a citizen, then if they are still "targets" the government can charge them with violating the citizen's civil rights. When O.J. Simpson is acquitted and is still a target, then a jury of middle-Americans can break him under another set of laws. When the government fails to convict Declan for terrorism because of something he has written about Jim Bell's prosecution, then they can charge him with tax evasion for the deductions he has taken for business expenses when writing is only a "hobby" he has used to commit tax fraud. {The justice system will look to the IRS for the proper interpretation of Section 20098.6, Subsection AF488GC, which states "Writing is Declan's employment, not just a hobby." Their interpretation will result in a conviction.} The government has stacked all the dice in favour of themself and against the citizen. If they can't successfully persecute/prosecute the citizen under "this" law, they will try again under "that" law. If they still fail to get a conviction, they can prosecute under yet another law and drag the case out to the point it financially breaks the citizen. If the citizen gets a large measure of financial and legal support, as in the case of Phil Zimmerman, they may survive. If not, they are "toast" in a very short period of time. There's something wrong when I'm a felon under an increasing number of laws. In 1984, "1984" had become a reality for "them." Now it is a reality for "us." TruthMonger

4 3

EVENT: Online town hall meeting with Rep. Bob Goodlatte (June 3, 8:30pm
by Shabbir Safdar 17 Dec '03

17 Dec '03

========================================================================= _ _ __| | ___ _ __ ___ ___ ___ _ __ __ _ ___ _ _ _ __ ___| |_ / _` |/ _ \ '_ ` _ \ / _ \ / __| '__/ _` |/ __| | | | | '_ \ / _ \ __| | (_| | __/ | | | | | (_) | (__| | | (_| | (__| |_| |_| | | | __/ |_ \__,_|\___|_| |_| |_|\___/ \___|_| \__,_|\___|\__, (_)_| |_|\___|\__| |___/ Government Without Walls _________________________________________________________________________ Update No.8 http://www.democracy.net/ May 29 1997 _________________________________________________________________________ Table of Contents - Join Encryption Warrior Rep. Bob Goodlatte (R-VA) - Background on Rep. Bob Goodlatte (R-VA) - How to participate in the Online Town Hall Meeting - Upcoming Events - About democracy.net ___________________________________________________________________________ JOIN REP. BOB GOODLATTE (R-VA) LIVE ONLINE TUESDAY JUNE 3, 8:30 PM ET Who is Congressman Bob Goodlatte? Depending on your point of view, the Republican Congressman from Virginia is either a steadfast champion of online privacy, or a supporter of censorship in cyberspace. This year, Rep. Goodlatte has been leading a successful charge to overturn the Clinton administration's encryption control policies. Goodlatte is the principal author of H.R. 695, "The Security and Freedom through Encryption (SAFE) Act." -- a bill designed to promote privacy and security on the Internet by encouraging the widespread availability of encryption technology. Goodlatte's efforts to protect privacy and prohibit the government from imposing "key-escrow" and "key-recovery" domestically have won him praise from Internet users. The SAFE bill was recently approved by the House Judiciary Committee (the first time an encryption reform bill has ever cleared a major Congressional committee), and is now headed to the House International Relations Committee where a tougher fight is expected. But in 1995, Rep. Goodlatte was a leading supporter of the Communications Decency Act (CDA) -- a law which for the first time imposed broad content regulations on the Internet. The CDA is currently being reviewed by the Supreme Court and a decision is expected before the end of June. Join Congressman Goodlatte for a live, Virtual Town Hall meeting and find out what makes him tick. You can submit questions in advance by visiting http://www.democracy.net. The discussion will be moderated by Todd Lappin, Section Editor at Wired Magazine. ____________________________________________________________________________ BACKGROUND ON REP. BOB GOODLATTE (R-VA) [This information is taken verbatim from Rep. Goodlatte's World Wide Web page at http://www.house.gov/goodlatte/] Bob Goodlatte, age 44, was elected to serve as the Sixth District's Congressman in November of 1992. He was re-elected to his second term without opposition in 1994. He is a graduate of Washington and Lee University School of Law, and his undergraduate degree in Government was earned at Bates College in Lewiston, Maine. Before being elected to Congress, Bob served as former Congressman Caldwell Butler's District Office Manager from 1977 to 1979, where he was responsible for helping folks across the Sixth District. In 1979, he founded his own private law practice in Roanoke. He is a former partner in the law firm of Bird, Kinder and Huffman, working there from 1981 until taking office. Bob has long been active in his community, serving as President of the Civitan Club of Roanoke, and he's been active with the Parent Teachers Association at his children's public school and with the United Way of the Roanoke Valley. Bob serves on the Judiciary Committee and the Agriculture Committee. His subcommittee assignments on Judiciary are: the Constitution Subcommittee and the Courts & Intellectual Property Subcommittee. His subcommittee assignments on Agriculture are: the Livestock Subcommittee and the Department Operations and Nutrition Program Subcommittee where he serves as the Chairman. After Republicans won the majority, Whip Tom DeLay (R-Texas) selected Bob to serve as an Assistant Whip. Bob and Maryellen, his wife of 22 years, live in Roanoke with their two children, Jenny and Bobby. ____________________________________________________________________________ INSTRUCTIONS ON HOW TO PARTICIPATE * Interactive Town Hall Meeting with Rep. Bob Goodlatte (R-VA) * DATE: Tuesday June 3, 1997 TIME: 8:30 pm Eastern (5:30 pm Pacific) LOCATION: http://www.democracy.net In advance of the town hall meeting, please visit http://www.democracy.net and fill out the form to ask Rep. Goodlatte a question. We will collect the questions and forward them to the moderator on the day of the event, and will make every effort to ensure that questions from constituents are asked first. 1. Attend and ask Rep. Goodlatte a question! Please mark this date in your calendar: Tuesday June 3, 8:30PM Eastern at http://democracy.net/ 2. Get your friends and co-workers to join the discussion Members of Congress love to hear from their constituents. If you have friends that live in the district, please forward this invitation and encourage them to attend. _____________________________________________________________________________ UPCOMING EVENTS Visit http://www.democracy.net for upcoming event information. _______________________________________________________________________________ ABOUT DEMOCRACY.NET The democracy.net is a joint project of the Center for Democracy and Technology (CDT) and the Voters Telecommunications Watch (VTW) to explore ways of enhancing citizen participation in the democratic process via the Internet. To this end, democracy.net hosts live, interactive cybercasts of Congressional Hearings and online town hall meetings with key policy makers. democracy.net is made possible through the generous support of WebActive, Public Access Networks, the Democracy Network, and DIGEX Internet. More information about the project and its sponsors can be found at http://www.democracy.net/about/ To receive democracy.net announcements automatically, please visit our signup form at http://www.democracy.net/ or send mail to majordomo(a)democracy.net with "subscribe events" in the body of the message. _____________________________________________________________________________ End update no.8 05/29/1997 =============================================================================

1 0

e$: Altered States. Transfer payment addiction, Le Infame, andPhil Dick's definition of reality.
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: Robert Hettinga <rah(a)shipwright.com> Mime-Version: 1.0 Precedence: Bulk Date: Thu, 29 May 1997 11:57:32 -0400 From: Robert Hettinga <rah(a)shipwright.com> To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: e$: Altered States. Transfer payment addiction, Le Infame, and Phil Dick's definition of reality. At 1:23 pm -0400 on 5/28/97, Bill Frantz wrote in cypherpunks: > I object to the state, providing addictive substances/experiences when > private enterprise could do the job. If they are against addiction, then > they should set a good example. For myself, I deplore the state's all-too-successful efforts to "provide" that ultimate addictive substance, the transfer payment. >From the oxymoron of "Social" "Security", to direct subsidies on everything from electricity to sugar to helium, from deliberately mispriced federal assets like lumber, water and mining rights, to indirect subsidies like the tax-deductibility of mortgage interest and health "insurance", we use our government to bleed money, initiative, and, ultimately, freedom from the people who produce wealth and material well-being and give almost all of it to people who do nothing but consume and obstruct. We've all become a nation of innumerate dole-junkies, unaware of the economic consequences of our actions because the state has hidden them behind a veil of pseudoeconomics and political cynicism. The heyday of Roman dole was nothing compared to the "compassion" we increasingly have for ourselves. So, like a lot of people, I hope and work for the day when that giant mosquito on the Petomaine :-) river -- and its larvae in places like Jefferson City -- starts sucking air instead of the economic and moral lifeblood of people who actually work for a living. Then, maybe, this nation of lotus eaters will wake up to the fact that we've no one to rely upon but ourselves. Science fiction author Phillip K. Dick said, "Reality is that which doesn't go away when you change your mind." I would ammend it to say that reality is that which is still there when transfer payments stop. Voltaire used to end all his correspondence with "Death to Le Infame". "Le Infame" translates as "the infamous thing". He was talking about the church then, but nowadays it seems that *all* of us take communion at Our Lady of the Federal Transfer Payment. The end of opressive religeous control of society was the advent of science, the enlightment, and the triumph of reason that resulted from them. The founding of this country was part of that revolution. Unfortunately, unreason shed its priestly vestments and immediately counterattacked in the form of Rousseau, Robespierre and the French revolution. Since then, through the mechanations of Rousseau's intellectual decendants like Karl Marx, and lately, the people that Harold Bloom calls the "School of Resentment", nation states have justified more and more oppression in the interest of unobtainable mirages like "equality" and "security", and in perverting words like "fairness" and "justice" to mean envy and arbitrary confiscation. The very touchstone of reason in political thought, this country's constitution, is now standing on the bottom of a vast lake of irrational statist excrement, with its nose barely above the waterline. Sometimes, I think that, when we can breathe no longer, and we try to return to the shore of reason, we'll forget the swimming lessons the founding fathers and the philosophes of the enlightenment taught us. That we'll drown in our own sloth, envy, resentment, and, more important, lack of faith in ourselves. However, most of the time, I'm much more optimistic. I believe that the increasing ubiquity of all information, and, more important, the means for each person to competitively process that information himself to get independently replicable results, will create a world where people and their computing technology become the equivalent of scientists, testing and verifying facts about the world themselves, rather than having reality served to them on a lotus leaf. The operative word in that Proustian sentence was "competitively". That means markets for everything which can be put into ones and zeroes and sent on a network, which in turn means instant settlement and clearing of those transactions, and, most important, a myriad of autonomous economic entities operating in efficient, competitive, auction markets for that information. Fortunately, we have the technology, in the form of things like the blind signature algorithm, public key cryptography, Moore's law and geodesic networks, to make this happen. I believe that we actually have no economic choice, and so it will happen. It's as if we have found the dole-receptors in our economic neurochemistry, and soon our transfer payment addiction will be a thing of the past. "Reality is that which doesn't go away when you change your mind." Kicking an addiction is by definition a mind-altering experience. :-). Polemically, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ ---------- The e$ lists are brought to you by: Intertrader Ltd: "Digital Money Online" <http://www.intertrader.com/library/DigitalMoneyOnline> Where people, networks and money come together: Consult Hyperion http://www.hyperion.co.uk info(a)hyperion.co.uk Like e$? Help pay for it! <http://www.shipwright.com/beg.html> For e$/e$pam sponsorship, mail Bob: <mailto:rah@shipwright.com> Thanks to the e$ e$lves: Of Counsel: Vinnie Moscaritolo <mailto:vinnie@webstuff.apple.com> (Majordomo)^2: Rachel Willmer<mailto:rachel@intertrader.com> Commermeister: Anthony Templer <mailto:anthony@atanda.com> Interturge: Rodney Thayer <mailto:rodney@sabletech.com> --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: US grants export license for PGP
by Secret Squirrel 17 Dec '03

17 Dec '03

> Joey Grasty writes: > > At 08:00 PM 5/28/97 -0700, Lucky Green wrote: > > > >PGP crypto approved for export > > > > Alright, what's the catch? What kind of GAK does PGP have to > > stick in to get this approval? Encyphering minds want to know... > > The catch is that the license only extends to business use by > subsidiaries of certain large US corporations. > > See PGPInc's press release at: http://www.pgp.com/newsroom/prel34.cgi Well that sure got buried by the "Truth Above All Else (tm)" press. Not surprising however. > > It may be moot since some versions of PGP are available around the > world, but this strikes me as patently unfair to all those companies > not big enough to be on The List. > > On the other hand, maybe this is the beginning of the end. It seems > to me that it will be difficult now to deny a similar license to > Netscape or Microsoft or... We have so many laws in this country, doesn't one of them prevent "discrimination" based on dollar value of corporation? ;) How about extortion... "You must be a large company paying buttloads in taxes and making sizeable contributions to the administration to receive license to use PGP overseas..." Can't we use this against them and force the license to be extended to everyone? > > -- Jeff (currently employed by a Real Company :-) > -- Mr. E (not employed by a Sellout^H^H^H^H^H^H^HReal Company)

1 0

No Subject
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

On Wed, 28 May 1997, Tim May wrote: > At 5:02 PM -0400 5/27/97, Mark M. wrote: > > >I don't know the reason, but the IRS tax code requires that all passport > >applicants supply their SSNs to the IRS. The penalty for failing to > >notify is $500. I recently encountered this situation and just left > > Good for you, seriously, but you may not yet have heard the last of this. > As with "frivolous returns" (such as writing comments on the tax forms They can always harrass. Supposedly the State Department reports to the IRS anyone who does not give this info, but the IRS seems not to follow up, an the only thing they could do under the law is impose the $500 penalty which would probably not survive a court challenge (I forget the particular reasoning, but if they challenged and lost, no one would have any fear not giving their SSNs out, similarly to why they don't charge every cypherpunk under export laws - fear of grey is more useful than a clear line that will be more liberal than they want). When I applied for a passport (specifically because it is a government recognized ID that need not contain your social security number), I didn't write the IRS at all (you have no duty to notify them), and IF contacted, I would simply say "Who do I make the $500 check out to, and where do I send it, and who should my lawyer contact to challenge it". I have never been contacted. > The woman behind the desk didn't seem interested in my point and just said > that without a valid SS number, no registration tags would be issued. It > was then my choice to drive without tags (and get a ticket anytime a cop > noticed this and decided to act on it) or seek some kind of legal > restraining order (???, but probably $$$). IANAL, but: There is another statute which says that any time a government agency (it does not apply to corporations) asks for your SS# they have to state the reason and authority they have to ask for it (something like a state statute or order - I will look up the info and post here when I have time). Usually the behind-the-counter culture doesn't know about this. You can also give a religous objection. You can ask for the name of the person and their exact title then ask nicely to speak with a manager familar with the law or procedure, and that it might be illegal to ask for that information without citing the authority (with the above law in hand), etc. Since they have to have alternate ID numbers unless they only give licenses out to US citizens and not the Amish or others who have religous objections - you can ask for one of these alternate numbers. You can also be agreeable and say, OK, if you want to see my SSN so that you can confirm that I am me, I will show it to you, but I don't want that specific number on my license, and you can pick any number that is convienient to you, or I can supply my standard "alternate-ID" number. My state uses a number that is a wierd checksum of my name and birthdate and who knows what, so it doesn't apply to my drivers license. I had my SSN used (they didn't tell me that is what it was for, and this was before I was as aware of the privacy matters) on a professional license, and they did things like disclose it to people who bought their mailing list and it appeared in some mailings. I only had to call the state office, explain about the problems of identity fraud, and had a new license with a new number (which I use as my alt-id number) within a week (and they said they would not include SSNs with their mailing list). Some people are reasonable. Generally they try to find the easiest path. When it is clear that you won't go away quietly, and that you are going to be more hassle than it is worth (and that you aren't trying to evade any requirement, e.g. "You agree that I have proper ID, and qualify in every other way, and the only reason you won't is because I won't tell you my SSN even though you can't cite the authority you have ...") you can usually get them to either relent or say something slanderous in public. A silly but necessary game. Now if I can mail in a form, I usually use the alt-id number and write it in place of the SSN with a note right next to it saying it is not my SSN and that if you really want it you have to write me back and explain why they want it. (If they do, I send them a NDA with something to the effect that if I find it has leaked anywhere they have to cover all costs associated with correcting any record, etc.). Given that they are usually desparate to sign me up for whatever it is, and the mail is a hassle for them, they just enter the alt-id number. I keep a copy of the original form with the Not-my-SSN statement in case someone wants to accuse me of any kind of fraud.

1 0

Surveillance State Delayed
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Fascinating article in last Saturday's New York Times about INS plans to revoke the U.S. citizenship of 5,000 people who got that citizenship sans criminal background checks so they could vote for Clinton in '96. Now, the INS revokes a big 25 citizenships a year so they really have a job ahead of them. Demonstrates the enforcement challenges of bureaucracies living in a mass society. They think they can get away with administrative revocations but even those can be appealed to federal court. 5,000 appeals would be quite a burden. If they wait too long and two years pass from time of granting, the Service will lose the administrative option and will have to do full court proceedings to revoke. Even if they revoke, the "aliens" will still have their old proofs of citizenship (passports, etc) as well as their former status as permanent residents so revocation may be meaningless in any case. That's not the cutest bit, though. In addition to the 5,000 new Clinton voters with provable criminal records, they had to go through 180,000 records of people with various sorts of documentation problems to see if any of them were criminals. But the Feds couldn't do it themselves. They lacked the capability. They hired one of the big accounting firms (Peat-Marwick?) to CHECK THE NAMES against the NCIC. They got some 9,000 positive matches but naturally, they can't tell how many of those 9,000 matches are false positives. Lots of work ahead. The gloom and doom types like to claim that it is trivial for the almighty Feds to find out everything about every one, look inside the souls of all of us, separate the good from the evil and unerringly punish the evil. Omniscience, omnipresence, omnipotence. Oddly enough, this claim is often made by people who, otherwise, don't believe in God. But this article on citizenship revocation gives lie to this claim of state power. Citizenship applicants have submitted vast quantities of information about themselves to the Feds. They have undergone years of a staged and complex process to move from nonresident alien to resident alien to citizen. At every point, they NARCed themselves out in detail directly to the federal government. And yet, that same government can't even tell if these people are "criminals." If they can't efficiently surveil and regulate this group, what chance do they have to regulate and surveil the other 260 million of us? DCF -----BEGIN PGP SIGNATURE----- Version: 5.0 beta Charset: noconv iQCVAwUBM43tToVO4r4sgSPhAQHhcAP+O3Kn/rTtonspM+fWF7S/MeoV/zENTgll Di4GCB1oZTlvU9je6ucRxpXvezsjgibmurApR22j3J0rhgHAVOCT8+EjNLAi3yGh mwXXuCH/Z55nAXVit8mZvXSrJ8OPFWMn57Nma33uaD48QJ7AFqVxISi7+pSI91Mx LR0oZ1nJE/8= =oo4o -----END PGP SIGNATURE-----

3 2

Mailing list
by TSadoff197＠aol.com 17 Dec '03

17 Dec '03

Please send

1 0

Anonymizer upgrades
by lcottrell＠infonex.com 17 Dec '03

17 Dec '03

(A copy of this message has also been posted to the following newsgroups: alt.security, alt.privacy,alt.anonymous,alt.privacy.anon-server) I am pleased to announce two significant improvements to The Anonymizer (www.Anonymizer.com) First, we have fixed the HTTP_X_FORWARDED_FOR and HTTP_VIA security holes. This was a problem for people accessing The Anonymizer though a web proxy. Second, we have introduced accounts on the Anonymizer. The poor performance of The Anonymizer (to put it lightly) has been due to our attempts to keep it from completely swamping our T1. Paid accounts on The Anonymizer bypass the slowdown mechanisms, and also provide access to anonymous news and anonymous anonymous FTP. Finally, while it has been true for some time, it is not widely known that the Anonymizer is owned and operated by Infonex. We took over management of the Anonymizer several months ago. For those not familiar with Infonex, we have been active in the privacy business for some time. We host several anonymous remailers, we offer anonymous shell accounts through our subsidiary Cyberpass (www.cyberpass.net) and I personally developed the Mixmaster anonymous remailer system. Lance Cottrell -- Lance Cottrell President, Infonex lcottrell(a)infonex.com http://www.infonex.com/~loki

3 2

Crypto Disputes
by John Young 17 Dec '03

17 Dec '03

For full versions of the stories below: http://jya.com/kinkey.txt ---------- For two years, the IETF Security Group has labored to hammer out the IP Security (IPSec) protocol, a standard way that businesses can open up an encrypted link to a trading partner's network. The link is encrypted after authentication by means of an X.509 digital certificate at an IPSec-based firewall or gateway. But an unresolved, bitter dispute over the technique for automatically swapping keys over the 'Net - referred to as key management - has resulted in two incompatible schemes in the IPSec specification. In this battle of the acronyms, the debate centers on the Simple Key Management for IP (SKIP), developed by Sun Microsystems, Inc., and the Internet Secure Association Key Management Protocol (ISAKMP), developed by the National Security Agency. ---------- Responding to Sun's announcement that it would license 128-bit encryption algorithms from Elvis+Co., a Russian company, the White House announced that it would look into Sun's actions. "Sun's strategy is another brick from a wall that is coming down," said Jim Bidzos, president and CEO of RSA Data Security. "And it highlights that something is wrong with the U.S. policy." Sun has approximately a 10 percent equity stake in Elvis+, whose product is based on Sun's publicly available protocol, Simple Key Management for IP (SKIP). The 10 percent interest is thought to be key to keeping other companies from licensing and reselling the same technology. The government's resolve, however, may be breaking down. Just last week, Sybase Inc. won approval to export database and server products with 56-bit DES encryption, even though the Emeryville, Calif., company has no model for key recovery. ---------- SKIP, which stands for Simple Key management for Internet Protocols, was submitted by Sun to the Internet Engineering Task Force as an Internet standard. Included in SKIP E+ are algorithms for 56-bit DES, two- and three-key triple DES, and 64- and 128-bit ciphers for encrypting network traffic and keys. The security software was developed by Elvis+, a company of former Soviet space scientists with offices near Moscow. Sun bought a 10 percent interest in the company in 1993, but does not take an active role, said Steven Hunziker, chief operating officer of Russia Communications Research Inc., Los Gatos, Calif. RCR represents Elvis+'s products in the U.S. "RCR is really small - me and an accountant and two lawyers - and they watch the law like hawks," Hunziker said. "Elvis+ has kept a very careful distance from Sun, and those guys don't need anything from Sun to create the technology they're creating. The FBI and the CIA are just lazy, which is why they object." "We've developed key recovery technology and gotten government approval, so we can export without having to resort to what they did," said Ken Mendelson, corporate counsel for Trusted Information Systems Inc., Glenwood, Md. ---------- VeriFone today announced that its Secure Electronic Transaction (SET) -based product suite has received export approval from the US Department of Commerce, marking the first announcement of a SET-based, end-to-end Internet commerce solution containing full strength encryption technology to be approved for international export. VeriFone's vGATE, vPOS and vWALLET software employ the SET encryption protocol for transactions over the Internet, utilizing 1024 bit key size for public key encryption and digital signatures, and 64 bit DES for bulk encryption. This approval enables VeriFone to offer a higher level of end-to-end encryption than was previously available from U.S. corporations to international customers without special permission from the U.S. government. ---------- IBM last week took the first steps to help software vendors comply with federal encryption export rules, with the release into beta of a new security tool kit. ----------

2 1

No Subject
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Press Release Pretty Good Privacy Receives Government Approval to Export Strong Encryption SAN MATEO, Calif., May 28, 1997 -- Pretty Good Privacy, Inc. (www.pgp.com) the world leader in digital privacy and security software, today announced that the U.S. Department of Commerce has approved the export of Pretty Good Privacy's encryption software to the overseas offices of the largest companies in the United States. This makes Pretty Good Privacy the only U.S. company currently authorized to export strong encryption technology not requiring key recovery to foreign subsidiaries and branches of the largest American companies. Click here to view the list of approved companies. The approval allows Pretty Good Privacy to export strong, 128-bit encryption without a requirement that the exported products contain key recovery features or other back doors that enable government access to keys. More than one-half of the Fortune 100 already use PGP domestically to secure their corporate data and communications. "Now we are able to export strong encryption technology to the overseas offices of more than 100 of the largest companies in America, without compromising the integrity of the product or the strength of the encryption," said Phil Dunkelberger, President of Pretty Good Privacy, Inc. "We worked closely with the State Department when they controlled the export of encryption, and are now working with the Commerce Department. And we have never had a license application denied." The license allows export of strong encryption technology, without government access to keys, to the overseas subsidiaries and branch offices of more than 100 of the largest American companies, provided that the offices are not located in embargoed countries, namely Cuba, Iran, Iraq, Libya, North Korea, Sudan or Syria. "As far as we know, Pretty Good Privacy, Inc. is now the only company that has U.S. government approval to sell strong encryption to the worldwide subsidiaries and branch offices of such a large number of U.S. corporations, without having to compromise on the strength of the encryption or add schemes designed to provide government access to keys," said Robert H. Kohn, vice president and general counsel of Pretty Good Privacy. "Pretty Good Privacy still opposes export controls on cryptographic software, but this license is a major step toward meeting the global security needs of American companies." The U.S. government restricts the export of encryption using key lengths in excess of 40 bits. However, 40-bit cryptography is considered "weak," because it can be broken in just a few hours. Generally, the U.S. government will grant export licenses for up to 56-bit encryption if companies commit to develop methods for government access to keys. For anything over 56 bits, actual methods for government access must be in place. Pretty Good Privacy's license permits the export of 128-bit or "strong" encryption, without any requirement of a key recovery mechanism that enables government access to the data. A message encrypted with 128-bit PGP software is 309,485,009,821,341,068,724,781,056 times more difficult to break than a message encrypted using 40-bit technology. In fact, according to estimates published by the U.S. government, it would take an estimated 12 million times the age of the universe, on average, to break a single 128-bit message encrypted with PGP. "Pretty Good Privacy, Inc. has been working diligently to ensure compliance with the export control laws. Clearly, the Commerce Department recognizes the needs of reputable American companies to protect their intellectual property and other sensitive business information using strong cryptography," said Roszel C. Thomsen II, partner at the law firm of Thomsen and Burke LLP. "User demand for strong cryptography is growing worldwide," said Marc Rotenberg, director of Electronic Privacy Information Center, and a leading privacy-rights advocate. "This is just one more example of the need to remove obstacles to the export of the best products the U.S. can provide." Companies that are approved for the export of Pretty Good Privacy's strong encryption should contact Pretty Good Privacy's sales office at 415.572.0430 or visit the company's web site at www.pgp.com. Companies that are not currently on the list of licenses obtained by Pretty Good Privacy, but would like to gain approval to use strong encryption in their branch offices and subsidiaries around the world, should also contact Pretty Good Privacy at 415.572.0430 for information about how to be included in future government-approved export licenses for PGP. About Pretty Good Privacy, Inc. Pretty Good Privacy (www.pgp.com) founded in March 1996, is the leading provider of digital-privacy products for private communications and the secure storage of data for businesses and individuals. Pretty Good Privacy's original encryption software for email applications (PGP) was distributed as freeware in 1991 by Phil Zimmermann, Chief Technical Officer and Founder of Pretty Good Privacy, and allowed individuals, for the first time, to send information without risk of interception. With millions of users, it has since become the world leader in email encryption and the de facto standard for Internet mail encryption. Over one half of the Fortune 100 companies use PGP. In order to provide only the strongest encryption software, Pretty Good Privacy publishes all of its encryption source code and algorithms for extensive peer review and public scrutiny. The company can be reached at 415.572.0430; http://www.pgp.com. For more information, please contact Mike Nelson, Pretty Good Privacy's Director of Corporate Communications, at 415.524.6203.

1 0

No Subject
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Last Friday, in a town hall meeting on education in Clarksburg, West Virginia, President Clinton made some news on the technology front. Answering a question from a parent about how to keep children safe on the Net, the president talked about the Communications Decency Act's travails in federal court. Then he said "we're working on" a technological fix, a V-chip for PCs that could protect children from harm. Later, reporters pressed White House aides on whether there was a new V-chip initiative. The new chip is out there, they said, somewhere "within the industry." From White House transcripts of the event and later briefings: Jim Eschenmann: Mr. President, my name is Jim Eschenmann. I'm a proud parent of a 4-year-old preschooler. Your administration, as well as the local board of education, has placed a large emphasis on connecting every classroom to the Internet. What additional measures can we take to protect our school students from the harmful areas of the Internet while guaranteeing full access to post-secondary students and to protect the freedom of speech? President Clinton: Well, you know, I signed a bill - when I signed the telecommunications bill ... I had a provision in there to try to protect against young people being exposed to some of the harmful things that are on the Internet. Not just pornography but, as I'm sure a lot of you know because of the events in the news in the last couple of years, there are even instructions on how to build bombs and things like that. There are lot of things on there that we wouldn't want our children to see. That provision has been thrown out by a court and is still in the courts, I think. So it may be that what we have to do is try to develop something like the equivalent of what we're developing for you for television, like the V-chip, where it's put in the hands of the parents or the educators. And then if it were in the hands of the educators the school board could approve certain guidelines. It's technically more difficult with the Internet. As you know, there are hundreds of new services being added to the Internet every week. It's growing at an explosive capacity and we're in the process actually of trying to develop an Internet II. But I think that is the answer. Something like the V-chip for televisions. And we're working on it. I think it's a serious potential problem myself. But let me say it would be a serious potential problem if they were not in the schools. I think putting them in the schools, because the kids are normally under supervision, you have a far less likelihood that the Internet will be abused or that the children will be exposed to something they shouldn't see during the school hours, in all likelihood, than at home. But I do think you need guidelines in both places and we're doing our best to try to figure out if there's some technological fix we can give you on it. Briefing by spokeswoman Ann Lewis (22 May): Q.: Three things that Clinton said - suggesting V-chips for the Internet, endorsing year-round schooling, and speaking favorably of high school competency tests before graduation. Are any of those new, or are those things he has said before? Ann Lewis: From my understanding, looking at the conversations back and forth on the V-chip for the Internet, as you know this is a principle the president has talked about for a long time, which is giving parents the tools they need, and it's the principle he referred to when he supported the - came out in support of the V-chip. He thinks it continues to be an issue. Second, if you go back and look at his speech on Net Day, when he gave a radio address and we did some talking about the Internet, he announced that he had asked the Department of Education and Secretary [Richard] Riley to come up with a parents' guide to the Internet, recognizing that it is a wonderful resource but that many families also feel they could use some help in ensuring that their children get the most out of the Internet. And, third, it's our understanding, and we just checked this with people at the White House who know much more about technology than all of us put together, that there is in fact technology being developed that would serve as the equivalent of a V-chip for the Internet, and we think that's what the president referred to. Q.: Clinton has talked before about giving parents ways to protect their children on the Internet, but has he ever before suggested the idea of a V-chip for the Internet? Lewis: Not that we know of, but we know - as is clear, I think, from his wording, he is aware that the technology has been developing. Q.: But has he talked about this before? Lewis: We don't think so. We were going to try to do a huge Nexis search; that's going to take a long time. We don't remember that conversation.... Q.: You said the technology is being developed - who is developing it? Lewis: I can't, but we can get you more information. It's my understanding it's being developed within the industry. Q.: That's like the stuff like Kidsitter and all the stuff that's already available on the Internet. There are a lot of sites. Lewis: There are a lot of sort of monitors you can put on that. We think this may be a little more advanced, and we're trying to get more information. White House Press Secretary Mike McCurry and spokesman Barry Toiv (23 May): Q.: Mike, yesterday the president endorsed the idea of a V-chip for the Internet. Was that the first time he did that, and how does the White House plan to proceed? Mike McCurry: Did anyone work on that yesterday? That was - there is some, I think, R&D work, technical work that's being done to develop new software. I'm not sure where within the government they're doing it.... Q.: Mike, I'm still trying to figure out, was yesterday the first time the president endorsed a V-chip for the Internet? McCurry: Did you do any yesterday on the V-chip question? Barry [Toiv] may have handled this up in West Virginia yesterday. Barry Toiv: Well, I'm not sure I have more than you got yesterday from Ann Lewis. The president has not specifically mentioned the V-chip, but this is work that we've been doing because he's been concerned, obviously, about ways that parents can help - can protect their kids with regard to stuff that comes through on the Internet. Apparently, it's our understanding that technology does exist within the industry. It's being developed by the industry. And so I think the president was referring to that yesterday. Q.: Is there any procedure that - I mean, is it something that - is there any kind of official "endorsement" you expect? Toiv: Well, right now - not right at this moment, but it's something we're looking at.

1 0

TURN $5.00 INTO $50,000 IN 6 WEEKS !!!!!!!!!!!!!!!!!!!!!!!!!!!!!
by MoneyMan＠goplay.com 17 Dec '03

17 Dec '03

YOU CAN START YOUR OWN INTERNET BUSINESS IN YOUR SPARE TIME!!! As you know the internet is growing at a tremendous rate. And I'm sure you realize that millions of dollars are exchanged for goods and services on the internet each day. Have you ever said to yourself "I would like to use my computer too make money" (or to make more money)?? WELL YOU CAN AND WILL MAKE THOUSANDS OF DOLLARS QUICKLY AND EASILY IF YOU FOLLOW THESE SIMPLE INSTRUCTIONS!!! The Business program outlined below is a simplified form of E-mail marketing. Do not take this opportunity lightly, it is a powerful tool that will allow you to have your own business and start you on the path to financial freedom. I KNOW THIS BUSINESS WORKS!! IT HAS WORKED FOR ME AND IT WILL WORK FOR YOU. By the time you receive this business plan there is a good chance that I will have been removed from the system. But thats ok because I have already made a tremendous amount of money using this system, and I would like to see your life change as much as mine has. There is nothing more rewarding than knowing that I have helped many good and honest people enrich their lives. Follow the instructions listed below EXACTLY and you will be on your way. Good Luck, and share the wealth. Sincerely, Samuel Abbott Ph.D. STEP1). Get 5 pieces of 8.5"x11" paper and write: "Please add me to your information mailing list" Now take 5 $1 bills and fold $1 inside each piece of paper. Place the request and money in 5 seperate envelopes and seal. Carefully address the envelopes with the 5 addresses provided below.(Be sure to include a return address and a stamp!) Now mail the requests In a timely manner. #1) D. Ewing; 7620 Washington; Kansas City, Mo. 64114 #2) Shari Davis; 1635 Manning Way; Colorado Springs, CO. 80919 #3) J. Turner; 5460 White Oak Ave #C207, Encino, CA 91316 #4) Steve Wrubel; 3234 Nebraska Place; Costa Mesa, CA. 92626 #5) E. Bennett; 18226 Ventura Blvd #202, Tarzana, CA 91356 STEP2). Copy this entire business plan and make the following changes: Remove the #1 name off the list. Place your name in the #5 position and move the other 4 names up. (#5moves to#4, #4moves to#3, #3moves to#2, #2moves to#1) Your name is now the bottom of the list. STEP3). POST THIS ARTICLE ON AT LEAST 200 NEWSGROUPS!!!!!!! E-MAIL THIS ARTICLE TO EVERYONE YOU CAN!!!!!!! IMPORTANT NOTE: You MUST post this article to AT LEAST 200 newsgroups. There are about 45,000 newsgroups, with more being added every day. Each time you post on a newsgroup your message will be seen by many different people. You should send this article via E-mail to as many people as possible. E-mail addresses are available for free through many sources on the internet. You can also purchase E-mail lists from several companies for a very small fee. Remember it's your business and the more places you send it to, the better your chances of success! (I highly recommend that you send it out to more than 200 places). REMEMBER TO PUT A CATCHY PHRASE IN THE SUBJECT BOX. CONGRATULATIONS YOU HAVE JUST JOINED A GROUP OF ENTREPRENEURS! Let me review why this works..... Send out 200 articles and with a 5% response you get $10. Those 10 people send out 200 and at 5% you get $100. Those 100 people send out 200 and at 5% you get $1000. Those 1000 people send out 200 and at 5% you get $10,000. Those 10,000 people send out 200 and at 5% you get $100,000. EVERYDAY THOUSANDS OF PEOPLE JOIN THE INTERNET!!!!!!!!!!! The above example is a perfect case scenerio. The response rate varies typically from 2% to 10%. To increase your success rate I suggest that you post this article to AT LEAST 200 newsgroups and send it to as many individuals as possible. Remember many people will see this article when it is posted on a newsgroup!! Also note that many of the people you send it to are likely to send it out to more than 200 newsgroups and people. You don't have to retype this article every time you send it, just follow the instructions below and you will see just how easy this business is. If you follow these simple instructions there is no way you can lose. Every day several thousands of people get on the internet. Don't delay start today, you'll be glad you did!!!!!!!!!!!!!!!!!!! POSTING TO NEWSGROUPS USING NETSCAPE: 1) Click on any newsgroup, like normal. Then click on to " To News" in the top left corner of the Newsgroups page. This will bring up a message box. 2) Fill in the subject box with a catchy phrase such as: $$$FAST CASH$$$, ARE YOU THE PERSON WHO..., or the like. 3) Now go to the message part of the box and retype this letter exactly as it is here. (The only thing you change is adding your name in the #5 position and moving the other addresses up 1 position each, thus removing the #1 name). 4) When you are done typing in the WHOLE letter, click on "File" above the send button, then "Save as..." DO NOT SEND YOUR LETTER UNTIL YOU SAVE IT!!(this is so you only have to type this once). 5) Now that you have saved the letter, go ahead and send your First copy!(click the send button in the top left corner). 6) THIS IS WHERE YOU POST AT LEAST 200 TIMES!!! OK, go to any newsgroup article and click the "To News" button. Type in Your catchy phrase in the SUBJECT BOX, then go to the body part of the message box and place your cursor there. NOW click on "Attachment" which is right below the SUBJECT BOX. Click on "attach file", then find the letter you saved, click once on your saved file, then click "Open", Then click "OK". If you did this right, you should see your filename in the attachment box and it will be shaded. NOW POST AWAY!!!!!!!!!!!!!!!!!!!!!!!!!!!!! IF YOU ARE USING INTERNET EXPLORER: 1) Its just as easy, Holding down the left mouse button, highlight this entire article, then press the the "CTRL" key and the "C" key at the same time to copy this letter. 2) Now go to the newsgroups and press "POST AN ARTICLE", Type in your catchy phrase in the subject box, and click the large window below. Press "CTRL" and "V" and the article will appear in the message window. **BE SURE TO MAKE YOUR ADDRESS CHANGES TO THE 5 NAMES** 3) Now re-highlight the letter and RE-COPY it so you have the changes...Then all you have to do for each newsgroup is press "CTRL" and "V" and press "POST" it's that easy!!!!! Thats it ! All you have to do is jump to different newsgroups and post away. For both methods it only takes about 30 seconds to post to each newsgroup. Once you get the hang of it. REMEMBER THE MORE NEWSGROUPS YOU POST TO THE MORE MONEY YOU MAKE!! YOU MUST POST TO A MINIMUM OF 200 NEWSGROUPS!!!!!!!!!!!!!!! You should start receiving replies within a week or so (sometimes they come within days) BE SURE TO SEND OUT $1 TO THE PEOPLE ON THE LIST PROMPTLY!!!!!!!!! PERSISTENCE AND HONESTY WILL REAP YOU HUGE REWARDS!!!!!!!!!!!!! DO NOT TO LET THIS OPPORTUNITY PASS YOU BY!!!!!!!!!!!!!!!!! FOR JUST $5 YOU CAN CHANGE YOUR LIFE!!!!!!!!!!!!!!! REMEMBER: THE PERSON WHO DARES NOTHING, NEED NOT HOPE FOR ANYTHING. Print this article so you have the addresses to send to, and the information on file.

1 0

Libraries! Partial Solution to PGP Windows Wars and Source Code
by Bill Stewart 17 Dec '03

17 Dec '03

[There's been a major flame war on pgp-users about the lack of Win3.1 support, and more than a few cypherpunks have asked about source.] PGP has always had a policy of making the source code available; it was one of the big things that let us trust it. PGP has also been available under a variety of platforms, whether written/ported by Phil and associates, or ported by others. Recently, PGP Inc. has come out with several major systems, including - PGP 3.0 and 3.0.1 pre-alpha code, including libraries, which have been published in book form and on the net. For portability and compatibility, the most important things are the algorithms and file formats used. - PGP 5.0 with fancy user interface for Win32 only. I'm assuming that PGP 5.0 is written using the PGP 3.0.1 libraries* - if they've got any sense, they've used the same libraries with at most some bug fixes and/or simple new features that they can put out as a point release, and limited the Win32-related stuff to GUIs, interfaces to other Windows programs, and similar non-portable stuff, some of which can be bullied into working on DOS or Win16 and some of which is too much trouble to crowbar in. If so, then *you* can do your own GUI work on Win16, MacOS 6, and OS/360, and be sure of interoperability with Fancy New PGP. In particular, the user-friendliness front-end programs like pgpclip and Private Idaho can use the libraries instead of having to pop up DOS subsystems to run. (PI was very nice with ViaCrypt 2.7.1, which let everything run as communicating Windows programs.) Using the libraries also helps us trust the security - it doesn't mean the GUIware doesn't also send a copy of your passphrase to aldrich(a)nsavax.us, but it does let you build interoperable code you can trust, and it makes it easier to verify that at least the basic crypto routines are solid. [* Perhaps I'm naive, and I must confess to not finishing all 4 volumes of code, but I'd _hope_ they did the right thing...] # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list or news, please Cc: me on replies. Thanks.)

6 5

Re: Newsflash: PGP approved for export of strong crypto
by Bill Stewart 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Subject: Re: Newsflash: PGP approved for export of strong crypto To: ddt(a)pgp.com, cypherpunks(a)toad.com Hi, Dave! Thanks for forwarding the press release to various lists. (Could you also forward this along to Mike Nelson? The press release didn't include his email :-) I was interested in a couple of issues. 1) Cool - especially doing it without GAK! This kind of thing is a major wedge in the export control regime, even if it is mainly for the big players first. 2) Are there explicit terms a company has to agree to to be allowed to export PGP to its non-US subs/branches, or is it just negotiation with the State Department? Does it take excessive expensive legal paperwork, or is it something just about anybody could do? Could Bill Stewart Consulting (i.e. just me) meet the requirements? After a company is approved, are there special record-keeping requirements, or could I just email or registered-US-Snail or DHL-mail a copy to my branch in Japan or the UK? (One of the interesting cases for me is subsidiaries that are joint ventures with other companies such as non-government-owned foreign telcos.) 3) Your press release said: > In order to provide only the strongest encryption software, > Pretty Good Privacy publishes all of its encryption source code > and algorithms for extensive peer review and public scrutiny. Does this mean that the non-encryption parts of your code probably won't be reviewed, at least in public? -----BEGIN PGP SIGNATURE----- Version: 5.0 beta Charset: noconv iQBVAwUBM46IIfthU5e7emAFAQEi4wIAnnS3BM1lZuw179QNq7unrr9IIBAEUI7e ww46TBni27NUL9F5vN54L2HYTlg15Je3hfMTPKcSQn6abAvT12e+Vg== =huGZ -----END PGP SIGNATURE----- BTW, the 5.0 plug-in to Eudora is nice! I'm having a little trouble guessing when it's going to include my signature block and when it's not, but so far I like it, and the Win95 PGPtray widget was also convenient. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list or news, please Cc: me on replies. Thanks.)

1 0

Apology
by MoneyMan＠goplay.com 17 Dec '03

17 Dec '03

This is a formal apology for the Chain letter I sent you. I was not aware at the time that things such as these were illegal. Please be reassured that you will no longer be recieving any mail from me. I am once again sorry if I have caused you any problems. Eric

1 0

There's something wrong...
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Friday, May 30, 1997 - 21:07:32 MET > A major nail in the coffin of Justice for any accused in the U.S. > > was when the justice system promoted the concept of guilt by virtue > > of "circumstantial" evidence to the point where people can now be > > convicted as a result of speculation rather than evidence. Prosecutors > > now seem to need only to convince the sheeple that it was "possible" > > for the defendant to have commited the crime and that circumstantial > > evidence points *only* to the accused. Actually we are well passed that point. Jim Bell's arrest and pending prosecution amounts to thought crime. Its not "possible they commited a crime" now its possible that they "may" commit a crime. At Waco, dozens of innocents were killed, burned alive on national television in their home and church from an unwarranted, excessive use of force in order to serve a search warrant on David Koresh for what they "may" have been doing. No one was under indictment, under arrest or accused of an actual crime, yet through media manipulation that branded koresh and his followers Kooks, the nation watched another act of Statist-TV-Terrorism. The message through the medium this time?, "We don't need no stinking charges." Mandatory sentencing (a legislative and executive end run that usurps judiaciary power by eliminating judicial discretion) Terroristic Speech (a euphemism for 'thought crime' in many cases) are two examples of end runs around citizens contitutionaly protected rights that are being used daily to commit violent attacks on individual citizens civil rights.

2 1

PGPlib-0.2 available
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text To: pgplib-announce(a)petium.rhein.de Subject: PGPlib-0.2 available Date: Fri, 30 May 1997 15:06:42 +0200 From: Tage Stabell-Kulo <tage(a)acm.org> Reply-To: tage(a)acm.org Sender: pgplib-announce-owner(a)petium.rhein.de Precedence: list -----BEGIN PGP SIGNED MESSAGE----- Announcing PGPlib-0.2 ===================== We are pleased to announce a new verison of PGPlib. You can obtain the newest version (that is 0.2 as of today) from ftp://dslab1.cs.uit.no/pub/PGPlib.tar.gz In short, you will find a library that enables your software to read and write "packages" which can be decrypted and/or verified by means of PGP. In other words, you can incorporate PGP compatibility in your software without having to run PGP. When you uncompress and un-tar the file, you will obtain four files in the CURRENT directory. These files are README Describing how to preceed PGPlib-0.2.tar The library, manual pages and so on PGPlib-0.2.tar.asc A detached signature for verification pubkey.asc My public key (again, for verification) It is described in README how to verify the release you have obtained, how to unpack, what you will actually get when you unpack, and so on. What is there for you ===================== PGPlib is a library that lets you generate (and manipulate) PGP packets without having to run PGP. In particular there is code to generate and understand the following types of PGP packets: - Literal with filename, mode, etc. You can create literate packages from files, or from buffers, and create files from literate packets; - Convential encrypted (IDEA with Zimmermann's context sensitive feedback). The library can both read (decrypt) and write (encrypt) convential packets (in PGP format); - Armor. You can (de)armor a buffer or a file into a buffer or a file; - UserID packets are read and written in a variety of formats; - Keys can be obtained from a database (which is provided) or by parsing keyrings. Keys can be kept in buffers or on files; - You can maintain a PGP public-key database (I use this library to maintain a database with ~40.000 keys). There is code to use DBM as supplied from Berkeley or, if you prefer, GDBM from GNU; - You can verify RSA signatures on public keys and on buffers (files); - You can encrypt data (file or buffer) with public keys. The DEK is naturally written as a separate packet; - With a secret key you can sign other keys and buffers. Keys can be read from databases or files; they are decrypted on the fly. We have made a small program that will (de)armor anything, a parser to parse PGP files (including decryption and so on), a shell to manipulate a keydatabase, a keyserver to run on top of such a database, a program to verify signatures on keys and/or files, a program to split keyrings in smaller parts and a program that will sign files for you. You will find all these (and more) in the applications/ directory. None of these uses PGP, the library provides all the functionality you need. What you need ============= - You must have the SSLeay library as I have not implemented any cryptographic functionality; I hope SSLeay is a good choice. I did not major in mathematics and can thus not judge the quality of their work, although it looks solid (to me). I link with their version 0.6.6. I rely on SSLeay for great many things, in particular their BIGNUMs, RSA encryption and IDEA. I use "fprintf(stderr" when problems occur, but integration into the SSLeay "error-system" might happen. You can obtain SSLeay from: * ftp://ftp.psy.uq.oz.au/pub/Crypto/SSL/ - SSLeay source * ftp://ftp.psy.uq.oz.au/pub/Crypto/SSLapps/ - SSL applications * http://www.psy.uq.oz.au/~ftp/Crypto/ssl.html - SSLeay Programmer Reference SSLeay is quite large and I only use a fraction of it. On the other hand, SSLeay seems to be well maintained and their crypto-library might very well shrink or become more modular as time passes. Your Feedback ============= Your feedback is solicited. Peter Simons <Peter.Simons(a)gmd.de> has created a mailinglist for PGPlib. To subscribe, send an e-mail to the address pgplib-dev-request(a)petium.rhein.de and write the command SUBSCRIBE into the BODY. If you want to be subscribed under a different address than the one you're mailing from, you can also use SUBSCRIBE yourname(a)somewhere.else to do the trick. To post to the list, send an e-mail to pgplib-dev(a)petium.rhein.de as usual. There is also an pgplib-announce(a)petium.rhein.de. Subscribe by sending an e-mail to pgplib-announce-request(a)petium.rhein.de with SUBSCRIBE in the body. The latter list will be very low-volume. If you write a nice application based on this library (the ultimate feedback :-), please feel free to send it to me and I will include it in the next release; Where to get PGPlib =================== ftp://dslab1.cs.uit.no/pub/PGPlib.tar.gz COPYRIGHT (yum, yum) ========= The library and included applications are all available under "Berkely style" copyright terms. Basically, this means that it is FREE for commercial and non-comercial use, and that you can do almost anything with the code. The only thing you can not do is to say that you wrote it. See the file COPYING for details. Let's go to work ================ I hope you like it, that you find is useful, that you will find no bugs, and that you will provide valuable feedback by means of the mailing list. Tage Stabell-Kul¯ Castelmaggiore, Italy 30. May 1997 //// Tage Stabell-Kuloe | e-mail: tage(a)ACM.org //// /// Department of Computer Science/IMR | Phone : +47-776-44032 /// // 9037 University of Tromsoe, Norway | Fax : +47-776-44580 // / "'oe' is '\o' in TeX" | URL:http://www.cs.uit.no/~tage/ -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: latin1 Comment: Processed by Mailcrypt 3.2, an Emacs/PGP interface iQCVAwUBM47QfAMzZ6tx+9RpAQFHJQQAmsrh3sqgeRdOFscXWAb7/bV5ivdgnB4+ IpgGpGPMhNYfAzDJvz2rdvt1Z38NhLjOHOTEl+RhKGUGmc7cDXiaAE38Vh3OJIPu FijHtMgr++GdxZS5/WvcUxlvvMQjyjDaX84eG0clG1djYizMzR+7HwsIaaJeLtOb wlBORx01NRo= =Q5Ed -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ PGP Library Announcements --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

The Bible Code
by John Young 17 Dec '03

17 Dec '03

Published today with great fanfare, "The Bible Code" describes the fruits of three Israeli mathematicians in decrypting hidden messages in the Bible by textual analysis algorithms. Blurbs claim that the work passed peer review for publication in a math journal a few years back, was confirmed by "a US Defense Department code-breaker" and predicted the assassinations of JFK, RFK, Sadat and Rabin. The NYT reported on the fanfare a few days ago and quoted some who claimed that the Israelis' claims were examined and faulted when first published, that the book's bunkum, and that if enough analysis is done on any text, any message can be found -- holy writs being perdurable candidates. Even so, are any here familiar with the Israelis' work? Better, is this book the first of many to come to celebrate the cook-ups of codes and cyphers and algorithmic chefs? Is a film in the works, or, best, a Seinfeld of 0s and 1s?

1 0

Re: relevance to Hayek research?
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Mon, 19 May 1997 11:21:28 -0400 To: Gregransom(a)aol.com From: Robert Hettinga <rah(a)shipwright.com> Subject: Re: relevance to Hayek research? Cc: austrianecon(a)agoric.com, VPostrel(a)aol.com Bcc: X-Attachments: Greg Ransom just set my subscription to Hayek-L to "review" because of the DCSB announcement I sent both there and to AustrianEcon. Since I figure that this posting probably won't see the light of day on Hayek-L, I'll just send it here to AustrianEcon instead. :-). Of course, I'm not complaining, really. Greg can do anything he wants with Hayek-L. I mean, he owns it; the internet being alloidial, and all. But, I thought I'd clear the air here a little bit about why I thought the June DCSB meeting would be useful to people both on AustrianEcon, and, even :-), Hayek-L. At 7:29 pm -0400 on 5/17/97, Gregransom(a)aol.com wrote: > Can you motivate this posting to the Hayek-L list for > me? Wow. I feel like a method actor or something. Say hello to Mr. Stanislawski for me, would you, Greg? > It is important that all posting to the > Hayek-L list be relevant to Hayek and his work, appropriate for the research > community, and not overly promotional or commercial in nature, nor in the > vein of advertising. Yeah. Anything that smacks the least bit of capitalism should be strictly avoided in such an academic setting. Hey, even *I* understand that one. ;-). If it's any consolation, DCSB really *is* just a bunch of people who get together to have lunch on first Tuesday of the month. It's not like I'm leveraging the old Harvard Club membership to create a massive personal fortune, or something. :-). I do confess that I sent the announcement to both place, and mostly on impulse, because I thought people in the Austrian economics trade would want to hear about a relatively unique economic phenomenon on the net, particularly as it reveals interesting things about how the net's decreasing the "latency" of money changes, or at least better defines, all kinds of transaction processes, and, maybe, the underlying economics of same. Not only do the type of instantaneous, continuous, digital cash-settled recursive auctions that Fred Hapgood is going to talk about at the June 3rd DCSB meeting have the potential to remove any need for copyright law on the internet, which I'll get to in a moment, but they're the tip of the iceberg for something waaay bigger. The technology behind the digital cash these recursive auctions will eventually use is all by itself a nation-state killer. In the long run, anyway. <and now, for a few blatantly commercial messages...> Since the strongest form of David Chaum's "ecash" <http://www.digicash.com/> digital bearer certificate transaction settlement protocol doesn't require book-entries, it doesn't require the force monopoly of a nation-state to backstop its transaction clearing process. There's a quote which might be useful here. It's from FC97, the first conference on Financial Cryptography, which we held in Anguilla this February and (plug, plug) a conference I had the good fortune think up ;-) <http://www.offshore.com.ai/fc97>. Doug Barnes, a fellow cypherpunk and now the Marketing VP for C2Net, a pioneering financial cryptography company in Berkeley <http://www.c2.net/>, said, during the legal session, "It's a bad idea when your internet payment protocol, in one of its terminating steps, says, 'and then you go to jail'". See my web page, <http://www.shipwright.com/>, for more details about this kind of stuff if you're interested. Also, see the debate I had in March with someone from the American Banking Association about the subject of digital bearer certificate technology. It's on HotWired's Brain Tennis site, <http://www.braintennis.com/>. Remember that, due to to the structure of the debate, he got in the last word, though. :-). <we now return you to the heresy trial, currently in progress> Now you can see why the war cry for most of my cypherpunk crypto-anarchist financial cryptography developer friends is "write software, not laws." That sounds pretty Hayekian, I'd say. Last September I was on the law enforcement panel, of all things, at the Institute, nee Office (go, Newt!), of Technology Assessment's "Symposium on the Regulation of Digital Cash". This thing was held in a conference room deep in the bowels of the Capitol Building. Yech. Talk about the lion's den. Anyway, they had me speaking, dead last in the whole symposium, immediately after the Justice Department's brand-new, wet-behind-the-ears and freshly-lobbied-for-by-the-EFF Assistant Attorney General for "computer crime", whatever that is. And, before him, and more to the point for our discussion here, spoke the Assistant Director of FinCEN. FinCEN stands for the Financial Crimes Enforcement Network, a truly amazing government agency which has the ability to tell anyone with a credit card or checking account not only what his current bank balance is, but, through perfectly legal "administrative requests" to his bank, what his, say, total clothing and grocery expenditures were last year, categorized by store. Couple that with those wonderfully subpoenable scanner cards at your supermarket, and I would say that Orwell almost has his revenge with us, eaten very cold indeed, for being so far behind schedule with '1984'. Anyway, there I was, at ground zero, in the very belly of the beast, and, if I do say so myself, I was a wonder to behold. I scared them so bad that the everyone's eyes actually bugged out. Their jaws really bounced on the floor a few times in true Tex Avery fashion. Proving, once again, that cartoon physics really is the only kind of science they allow inside the Washington Beltway. I told the assembled unholy host of legislative aides, beltway bandits, and various other corridor-crawling symbionts to Le Infame Moderne that David Chaum's blind signature patent created fully anonymous digital cash (issued by private free banks, mind you), something they vaguely knew already and were gathered there to try to stop. But, even more frightening to statists everywhere, it was quite a simple matter, really, to use the same cryptographic protocol to create anonymously held digital *bearer* forms of any negotiable instrument you could care to imagine: bonds, stocks, futures, or any derivative thereof. I told them Perry Metzger's joke about "Gold Denominated Burmese Opium Futures". That was good for a titter or two of nervous laughter... Remember, of course, that, and increasingly so, most assets are financial, and thus completely convertable to digital bearer form if the transaction protocol for them turns out to be significantly cheaper than the book-entry settlement methods of the status quo. After all, it wasn't too long ago in financial history that paper bearer certificates were the norm. There's a lot of cultural memory still there. The word "coupon" as a synonym for bond interest is a perfect case in point. Then came the real bombshell. The guy from FinCEN absolutely agreed that if the transaction costs of digital bearer certificates proved to be an order of magnitude (or, say, three) lower than book entries, which I claim they will be (without proof, of course, just yet ;-)), FinCEN would be pretty much out of business. The whole "crime" of money laundering would become the equivalent of a "legislated" value for Pi. An example which, I might add, proves Avery's Laws of Cartoon Physics, um, reigns, in legislative bodies the world over, and not just inside the Beltway. "Actually, it's worse than that, ladies and gentlemen," I said, quoting myself. "Virtually *all* of the current tax infrastructure is based upon book-entries and the necessity of audit trails to verify tax compliance: capital gains, income and sales taxes, even import duties. Those audit trails are there primarily to prevent non-repudiation in the execution of a transaction protocol, that is, all the double-entry bookeeping between the buyer and the seller and the financial intermediary(ies) underwriting the trade. Those audit trails are *not* there to enforce taxes, believe it or not." They didn't get the point, so I drove it home. I said, "Without the requirement to prevent non-repudiation (and, I ask you, when was the last time you had a cash transaction fail to clear?), the marginal cost of tax compliance will become unsustainable over time. Uncle, and his relations elsewhere, are all going to have to figure out something else to tax, in other words. Now, *what*, exactly, do you need all that money for?" I had all the right people standing up and yelling at me at question time, so I knew I was on to something. :-). So, somewhere, Greg, I think Dr. Hayek must be laughing out loud. That's why this kind of stuff might be important to your readership. Oh. Yeah. I forgot. The actual topic of this missive. What's a "recursive auction"? Jason Cronk, who subscribes to AustrianEcon, by the way, did a talk on them at the rump-session of, you guessed it, FC97 in Anguilla. Ian Grigg, a major free banking fan, and also a subscriber, presented an idea which is exactly the obverse(?) for *his* paper, which was accepted for the main conference session. Ian's paper dealt with a way to organize the "buy" side of the same process. Springer Verlag will be publishing the conference proceedings sometime this summer, and I'll announce that here, if there's interest. Anyway, a recursive auction market, for lack of a better analogy, is kind of like institutionalized software piracy. I create something new and digital. I go on the net, and I sell the first copy to the highest bidder. Then I sell the next copy to the next bid, which, of course, is probably lower than the first. I keep on doing this until people stop bidding. Of course, everyone who buys what I'm selling can turn right around and sell it to someone else in turn, probably at a lower price than they bought it from me. This is the only instance I can think of where buying high and selling low makes you money. ;-). Well, on an item-price basis, anyway. Obviously, the total return is higher on the sell side than the buy side, or nobody would be foolish enough to buy anything from you for resale. Just by forgetting the whole quasimystical issue of "rights" to electronic intellectual property (which, like the current "intellectual capital" craze, is, at best, a polite regulatory fiction), timeliness of content is rewarded, as is novelty, which keeps people who create new stuff right on cranking it out. A person who's invested in a big switch and bandwidth, or who has the most valuable use of any other kind, can afford to pay more for earlier, "fresher", copies of something than someone without the same net.resources. Because, for instance, in the case of the person with all the bandwidth, he can resell copies faster than anyone else. A person who doesn't need something badly can wait a while and pick it up at a lower price after the initial feeding frenzy's over. Finally, the person who continually invents something new gets paid as soon as something he makes becomes usable to anybody at all. The things which get sold can be anything from a jotted down brainstorm, to the first draft of a novel, to more perishible "content", like an hour of teleoperated surgery, say. So, for works of art, whatever that means, copyright law becomes superfluous. More to the point, given sufficient attention to such matters, *all* parties in recursive auction transactions can be completely anonymous, and everything still works. I mean, when was the last time you had to produce identification for a cash transaction? Okay, besides at the bank, and even then for deposits greater than $10k. That's the very exception which proves the rule, obviously. Cartoon physics comes to banking. Remember, again, book-entries cause book-entry taxation and regulations, not vice versa. Anyway, whether at the increasingly hysterical legislative cartoons, or because of the now sandy foundations of the nation state, again, Hayek, somewhere, *must* be laughing, Greg. Cheers, Bob Hettinga Moderator, The Digital Commerce Society of Boston (among other things...) --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

2 1

Government Conspiracy
by nobody＠hidden.net 17 Dec '03

17 Dec '03

Timmy C. Mayflower sexually molests little children, farm animals, and inanimate objects. < > < > V )_.._( V Timmy C. Mayflower \\ <____> // ~ <______> ~ > /~\______/~\ // /~\_____/~\ /_\ /~\____/~\ /_\ /~\___/\~\ _/_\/ \___/\__/__\/ \___/__\/ There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

INFO: Encryption battle heats up in House; experts weigh in (5/30/97)
by Shabbir J. Safdar 17 Dec '03

17 Dec '03

============================================================================= ____ _ _ _ / ___|_ __ _ _ _ __ | |_ ___ | \ | | _____ _____ | | | '__| | | | '_ \| __/ _ \ _____| \| |/ _ \ \ /\ / / __| | |___| | | |_| | |_) | || (_) |_____| |\ | __/\ V V /\__ \ \____|_| \__, | .__/ \__\___/ |_| \_|\___| \_/\_/ |___/ |___/|_| PRO-ENCRYPTION BILL CLEARS SECOND CONGRESSIONAL HURDLE; FACES TOUGHER TEST IN COMING WEEKS. CRYPTOGRAPHERS AND COMPUTER SECURITY EXPERTS ASSAIL GOVERNMENT KEY RECOVERY PLANS Date: May 29, 1997 Expires July 1, 1997 URL:http://www.crypto.com/ crypto-news(a)panix.com Redistribution of crypto-news is allowed in its entirety. _____________________________________________________________________________ Table of Contents Encryption battle heats up in the House Experts assail government key recovery plans What YOU CAN DO NOW! Background What's at stake How to start or stop receiving crypto-news Press contacts _____________________________________________________________________________ ENCRYPTION BATTLE HEATS UP IN THE HOUSE On May 14th, the House Judiciary Committee approved a bill designed to dramatically enhance the ability of Internet users to protect their privacy and security online. The bill now moves to the House International Relations Committee, where it is expected to face tougher opposition from the FBI, NSA, and the Clinton Administration. The International Relations Committee is expected to consider the bill soon. The Security and Freedom through Encryption Act (SAFE - HR 695) will prohibit the government from imposing mandatory law enforcement access to private online communications inside the US, affirm the right of American Citizens to use whatever from of encryption they choose, and relax current export restrictions which prevent the development of strong, easy-to-use encryption technologies. The Clinton Administration, led by the FBI and the National Security agency, opposes SAFE and is pushing for a policy of domestic restrictions on the use of encryption, guaranteed law enforcement access to private communications via government designed "key-recovery" systems, and continued reliance on out-dated, cold-war era export controls. For the first time in history, Congress is close to passing real encryption policy reform legislation which will protect privacy, promote electronic commerce, and recognizes the realities of the global Internet. Pointers to additional information on the SAFE bill and other efforts to reform U.S. encryption policy are attached below. Congress needs to hear from you! If you value your privacy and care about the future of the Net, please take a few moments to join the Adopt Your Legislator campaign. Instructions are attached below. ________________________________________________________________________________ CRYPTOGRAPHERS AND COMPUTER SECURITY EXPERTS ASSAIL GOV'T. KEY RECOVERY PLANS On Wednesday May 21, a group of leading cryptographers and computer scientists released a report which for the first time examines the risks and implications of government-designed key-recovery systems. The report cautions that "The deployment of a general key-recovery-based encryption infrastructure to meet law enforcement's stated requirements will result in substantial sacrifices in security and cost to the end user. Building a secure infrastructure of the breathtaking scale and complexity demanded by these requirements is far beyond the experience and current competency of the field." The report substantially changes the terms of the ongoing debate over US encryption policy. For more than four years, the Clinton Administration has pushed for a policy of continued export restrictions on strong encryption, and the development of global key escrow and key recovery systems to address the concerns of law enforcement. The study, the first comprehensive analysis of the risks of key recovery and key escrow systems, calls into question the viability of the Administration's approach. The Report's authors, recognized leaders in the cryptography and computer science field, include Hal Abelson, Ross Anderson, Steven M. Bellovin, Josh Benaloh, Matt Blaze, Whitfield Diffie, John Gilmore, Peter G. Neumann, Ronald L. Rivest, Jeffery I. Schiller, and Bruce Schneier The report is be available online at http://www.crypto.com/key_study/ ________________________________________________________________________________ WHAT YOU CAN DO NOW 1. Adopt Your Legislator Now is the time to increase our ranks and prepare for the fight that lies a head of us in Congress. Please take a few minutes to learn more about this important issue, and join the Adopt Your Legislator Campaign at http://www.crypto.com/adopt/ This will produce a customized page, just for you with your own legislator's telephone number and address. In addition, you will receive the latest news and information on the issue, as well as targeted alerts informing you when your Representatives in Congress do something that could help or hinder the future of the Internet. Best of all, it's free. Do your part, Work the Network! Visit http://www.crypto.com/adopt/ for details. 2. Spread the Word! Forward this Alert to your friends. Help educate the public about the importance of this issue. Please do not forward after July 1, 1997. _____________________________________________________________________________ BACKGROUND Complete background information, including: * A down-to-earth explanation of why this debate is important to Internet users * Analysis and background on the issue * Text of the Administration draft legislation * Text of Congressional proposals to reform US encryption policy * Audio transcripts and written testimony from recent Congressional Hearings on encryption policy reform * And more! Are all available at http://www.crypto.com/ ________________________________________________________________________ WHAT'S AT STAKE Encryption technologies are the locks and keys of the Information age -- enabling individuals and businesses to protect sensitive information as it is transmitted over the Internet. As more and more individuals and businesses come online, the need for strong, reliable, easy-to-use encryption technologies has become a critical issue to the health and viability of the Net. Current US encryption policy, which limits the strength of encryption products US companies can sell abroad, also limits the availability of strong, easy-to-use encryption technologies in the United States. US hardware and software manufacturers who wish to sell their products on the global market must either conform to US encryption export limits or produce two separate versions of the same product, a costly and complicated alternative. The export controls, which the NSA and FBI argue help to keep strong encryption out of the hands of foreign adversaries, are having the opposite effect. Strong encryption is available abroad, but because of the export limits and the confusion created by nearly four years of debate over US encryption policy, strong, easy-to-use privacy and security technologies are not widely available off the shelf or "on the net" here in the US. A recently discovered flaw in the security of the new digital telephone network exposed the worst aspects of the Administration's encryption policy. Because the designers needed to be able to export their products, the system's security was "dumbed down". Researchers subsequently discovered that it is quite easy to break the security of the system and intrude on what should be private conversations. This incident underscores the larger policy problem: US companies are at a competitive disadvantage in the global marketplace when competing against companies that do not have such hindrances. And now, for the first time in history, the Clinton Administration has DOMESTIC RESTRICTIONS on the ability of Americans to protect their privacy and security online. All of us care about our national security, and no one wants to make it any easier for criminals and terrorists to commit criminal acts. But we must also recognize encryption technologies can aid law enforcement and protect national security by limiting the threat of industrial espionage and foreign spying, promote electronic commerce and protecting privacy. What's at stake in this debate is nothing less than the future of privacy and the fate of the Internet as a secure and trusted medium for commerce, education, and political discourse. ______________________________________________________________________________ HOW TO START OR STOP RECEIVING CRYPTO-NEWS To subscribe to crypto-news, sign up from our WWW page (http://www.crypto.com) or send mail to majordomo(a)panix.com with "subscribe crypto-news" in the body of the message. To unsubscribe, send a letter to majordomo(a)panix.com with "unsubscribe crypto-news" in the body. Requests to unsubscribe that are sent to shabbir(a)vtw.org will be ignored. _____________________________________________________________________________ PRESS CONTACT INFORMATION Press inquiries on Crypto-News should be directed to Shabbir J. Safdar (VTW) at +1.718.596.2851 or shabbir(a)vtw.org Jonah Seiger (CDT) at +1.202.637.9800 or jseiger(a)cdt.org _____________________________________________________________________________ End crypto-news =============================================================================

1 0

Clinton on privacy and the Internet
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Thu, 29 May 1997 22:04:03 -0500 From: Andrew Shapiro <ashapiro(a)interport.net> To: telstar(a)wired.com, declan(a)well.com Subject: Clinton on privacy Todd and Declan: I assume you've both seen this quote about privacy (below) from Clinton's commencement speech last week. Declan, you might want to put up on the FC list -- if you haven't already. Cheers, Andrew *** From: http://www.epic.org/privacy/laws/clinton_speech_5_18_97.html#privacy Third, technology should not be used to break down the wall of privacy and autonomy free citizens are guaranteed in a free society. The right to privacy is one of our most cherished freedoms. As society has grown more complex and people have become more interconnected in every way, we have had to work even harder to respect the privacy, the dignity, the autonomy of each individual. Today, when marketers can follow every aspect of our lives, from the first phone call we make in the morning to the time our security system says we have left the house, to the video camera at the toll booth and the charge slip we have for lunch, we cannot afford to forget this most basic lesson. As the Internet reaches to touch every business and every household and we face the frightening prospect that private information -- even medical records -- could be made instantly available to the world, we must develop new protections for privacy in the face of new technological reality. (Applause.)

2 1

INFO: Encryption battle heats up in House; experts weigh in (5/30/97)
by Shabbir J. Safdar 17 Dec '03

17 Dec '03

============================================================================= ____ _ _ _ / ___|_ __ _ _ _ __ | |_ ___ | \ | | _____ _____ | | | '__| | | | '_ \| __/ _ \ _____| \| |/ _ \ \ /\ / / __| | |___| | | |_| | |_) | || (_) |_____| |\ | __/\ V V /\__ \ \____|_| \__, | .__/ \__\___/ |_| \_|\___| \_/\_/ |___/ |___/|_| PRO-ENCRYPTION BILL CLEARS SECOND CONGRESSIONAL HURDLE; FACES TOUGHER TEST IN COMING WEEKS. CRYPTOGRAPHERS AND COMPUTER SECURITY EXPERTS ASSAIL GOVERNMENT KEY RECOVERY PLANS Date: May 29, 1997 Expires July 1, 1997 URL:http://www.crypto.com/ crypto-news(a)panix.com Redistribution of crypto-news is allowed in its entirety. _____________________________________________________________________________ Table of Contents Encryption battle heats up in the House Experts assail government key recovery plans What YOU CAN DO NOW! Background What's at stake How to start or stop receiving crypto-news Press contacts _____________________________________________________________________________ ENCRYPTION BATTLE HEATS UP IN THE HOUSE On May 14th, the House Judiciary Committee approved a bill designed to dramatically enhance the ability of Internet users to protect their privacy and security online. The bill now moves to the House International Relations Committee, where it is expected to face tougher opposition from the FBI, NSA, and the Clinton Administration. The International Relations Committee is expected to consider the bill soon. The Security and Freedom through Encryption Act (SAFE - HR 695) will prohibit the government from imposing mandatory law enforcement access to private online communications inside the US, affirm the right of American Citizens to use whatever from of encryption they choose, and relax current export restrictions which prevent the development of strong, easy-to-use encryption technologies. The Clinton Administration, led by the FBI and the National Security agency, opposes SAFE and is pushing for a policy of domestic restrictions on the use of encryption, guaranteed law enforcement access to private communications via government designed "key-recovery" systems, and continued reliance on out-dated, cold-war era export controls. For the first time in history, Congress is close to passing real encryption policy reform legislation which will protect privacy, promote electronic commerce, and recognizes the realities of the global Internet. Pointers to additional information on the SAFE bill and other efforts to reform U.S. encryption policy are attached below. Congress needs to hear from you! If you value your privacy and care about the future of the Net, please take a few moments to join the Adopt Your Legislator campaign. Instructions are attached below. ________________________________________________________________________________ CRYPTOGRAPHERS AND COMPUTER SECURITY EXPERTS ASSAIL GOV'T. KEY RECOVERY PLANS On Wednesday May 21, a group of leading cryptographers and computer scientists released a report which for the first time examines the risks and implications of government-designed key-recovery systems. The report cautions that "The deployment of a general key-recovery-based encryption infrastructure to meet law enforcement's stated requirements will result in substantial sacrifices in security and cost to the end user. Building a secure infrastructure of the breathtaking scale and complexity demanded by these requirements is far beyond the experience and current competency of the field." The report substantially changes the terms of the ongoing debate over US encryption policy. For more than four years, the Clinton Administration has pushed for a policy of continued export restrictions on strong encryption, and the development of global key escrow and key recovery systems to address the concerns of law enforcement. The study, the first comprehensive analysis of the risks of key recovery and key escrow systems, calls into question the viability of the Administration's approach. The Report's authors, recognized leaders in the cryptography and computer science field, include Hal Abelson, Ross Anderson, Steven M. Bellovin, Josh Benaloh, Matt Blaze, Whitfield Diffie, John Gilmore, Peter G. Neumann, Ronald L. Rivest, Jeffery I. Schiller, and Bruce Schneier The report is be available online at http://www.crypto.com/key_study/ ________________________________________________________________________________ WHAT YOU CAN DO NOW 1. Adopt Your Legislator Now is the time to increase our ranks and prepare for the fight that lies a head of us in Congress. Please take a few minutes to learn more about this important issue, and join the Adopt Your Legislator Campaign at http://www.crypto.com/adopt/ This will produce a customized page, just for you with your own legislator's telephone number and address. In addition, you will receive the latest news and information on the issue, as well as targeted alerts informing you when your Representatives in Congress do something that could help or hinder the future of the Internet. Best of all, it's free. Do your part, Work the Network! Visit http://www.crypto.com/adopt/ for details. 2. Spread the Word! Forward this Alert to your friends. Help educate the public about the importance of this issue. Please do not forward after July 1, 1997. _____________________________________________________________________________ BACKGROUND Complete background information, including: * A down-to-earth explanation of why this debate is important to Internet users * Analysis and background on the issue * Text of the Administration draft legislation * Text of Congressional proposals to reform US encryption policy * Audio transcripts and written testimony from recent Congressional Hearings on encryption policy reform * And more! Are all available at http://www.crypto.com/ ________________________________________________________________________ WHAT'S AT STAKE Encryption technologies are the locks and keys of the Information age -- enabling individuals and businesses to protect sensitive information as it is transmitted over the Internet. As more and more individuals and businesses come online, the need for strong, reliable, easy-to-use encryption technologies has become a critical issue to the health and viability of the Net. Current US encryption policy, which limits the strength of encryption products US companies can sell abroad, also limits the availability of strong, easy-to-use encryption technologies in the United States. US hardware and software manufacturers who wish to sell their products on the global market must either conform to US encryption export limits or produce two separate versions of the same product, a costly and complicated alternative. The export controls, which the NSA and FBI argue help to keep strong encryption out of the hands of foreign adversaries, are having the opposite effect. Strong encryption is available abroad, but because of the export limits and the confusion created by nearly four years of debate over US encryption policy, strong, easy-to-use privacy and security technologies are not widely available off the shelf or "on the net" here in the US. A recently discovered flaw in the security of the new digital telephone network exposed the worst aspects of the Administration's encryption policy. Because the designers needed to be able to export their products, the system's security was "dumbed down". Researchers subsequently discovered that it is quite easy to break the security of the system and intrude on what should be private conversations. This incident underscores the larger policy problem: US companies are at a competitive disadvantage in the global marketplace when competing against companies that do not have such hindrances. And now, for the first time in history, the Clinton Administration has DOMESTIC RESTRICTIONS on the ability of Americans to protect their privacy and security online. All of us care about our national security, and no one wants to make it any easier for criminals and terrorists to commit criminal acts. But we must also recognize encryption technologies can aid law enforcement and protect national security by limiting the threat of industrial espionage and foreign spying, promote electronic commerce and protecting privacy. What's at stake in this debate is nothing less than the future of privacy and the fate of the Internet as a secure and trusted medium for commerce, education, and political discourse. ______________________________________________________________________________ HOW TO START OR STOP RECEIVING CRYPTO-NEWS To subscribe to crypto-news, sign up from our WWW page (http://www.crypto.com) or send mail to majordomo(a)panix.com with "subscribe crypto-news" in the body of the message. To unsubscribe, send a letter to majordomo(a)panix.com with "unsubscribe crypto-news" in the body. Requests to unsubscribe that are sent to shabbir(a)vtw.org will be ignored. _____________________________________________________________________________ PRESS CONTACT INFORMATION Press inquiries on Crypto-News should be directed to Shabbir J. Safdar (VTW) at +1.718.596.2851 or shabbir(a)vtw.org Jonah Seiger (CDT) at +1.202.637.9800 or jseiger(a)cdt.org _____________________________________________________________________________ End crypto-news =============================================================================

1 0

Re: Continuing spam from vulis
by Jeff Burchell 17 Dec '03

17 Dec '03

On Fri, 30 May 1997, Paul Pomes wrote: > The wider circulation is due to the complete lack of response from > remailer-admin(a)cajones.com. Be careful when you say "Complete lack of response". You've got no idea what I did and didn't do once I got your message. I have previously talked with the operator of the cypherpunks list (this was about 2 months ago when someone else was abusing the remailer to post trash to that list). At that time, I offered the standard good will gesture that remailer operators can offer: "Would you like me to block the list, so this remailer won't send anything to it". Because of the nature of anonymous remailers, this is about the extent of the action that I can take. To this, I recieved a very firm "no!" (cypherpunks is of course a list where people do have good reasons to use remailers). Because of that, I _WON'T_ block cypherpunks, until I am instructed to by May, Gilmore, Hughes, et.al. Period. This holds true for all mailing lists. I need to have authorization from the list maintainer to block the list. I have added your address to my block list, this remailer won't send anything directly to you in the future. If you don't want to read anything from this mailer that comes across lists, then you should either manually delete anonymous messages before reading them (the headers and return address make it obvious when a message has come through a remailer), or turn on some client-side mail filters. Your own company makes a product with adaquate functionality to do this. -Jeff Operator... Huge.cajones.com P.S. Besides... aren't ad hominum attacks on Tim May a Cypherpunks tradition? P.P.S. Isn't there a non-flames moderated cypherpunks? Perhaps you want to be on that list instead of the free-for-all. ----------------------------------------------------------------------------- "When they came for the 2nd Amendment, I said nothing, for I owned no gun Then the sixth was next to go, and I remained silent, as I was not on trial They took away the fourth, and I said nothing, as I had nothing to hide And then they came for the First, and I could say nothing."

2 1

And speaking of spamming! (was: Stanton McCandlish)
by Tim May 17 Dec '03

17 Dec '03

Speaking of unwanted messages, which legislators call "spamming." An EFF person, whom I do respect, by the way, added my name to a spammer's list, some shtick they have called "sixdegrees." Here's the spam I just got, complete with what they claim is my "password." Inasmuch as I never requested this password, and have no intention of using it, and have no contractual relationship with either "sixdegrees" or Stanton McCandlish, you folks might want to have some fun with this alleged service and (unrequested) password. The password may only work if it comes from "tcmay(a)mail.got.net," but, then, I hear that such "From:" fields are easily spoofed. --Tim >X-From_: bmkf0032(a)auto.sixdegrees.com Sat May 31 10:43:36 1997 >X-Real-To: <tcmay(a)mail.got.net> >From: "sixdegrees" <bmkf0032(a)auto.sixdegrees.com> >To: "May Tim" <tcmay(a)mail.got.net> >Reply-To: "sixdegrees" <bmkf0032(a)auto.sixdegrees.com> >Subject: Stanton McCandlish >Date: Sat, 31 May 1997 13:45:12 Eastern Daylight Time > >Name: May Tim >E-Mail Address: tcmay(a)mail.got.net >sixdegrees Password: cusproll > >You've been listed by Stanton McCandlish as "Acquaintance" >as part of a free Internet networking service called sixdegrees(tm). > >WHAT WE ARE: > > sixdegrees is a Web site at http://www.sixdegrees.com/ that's > based on the theory that everyone on earth is connected to > everyone else through a path of six people or less. We hope to > use the power of the Internet to revolutionize the way people > network. > >WHAT'S IN IT FOR YOU: > > You can come to http://www.sixdegrees.com/ and use our FREE > services to network with the people you want to know through > the people you do know. You can find out how you're connected > to specific people, like that person who's interviewing you for > a new job next week. Or, you can find out how you're connected > to certain kinds of people, like pediatricians in San Francisco, > or inline skaters in New York. > >WHAT'S IN IT FOR US: > > We make money by selling ads on the sixdegrees site. We > never sell lists of names or any specific information about > our individual members to anybody. To find out more about > our policies regarding privacy, just visit > http://www.sixdegrees.com/about/privacy.cfm > >HOW IT WORKS: > > If you list your contacts and how you know them, we'll forward > them an email like this one. They'll be invited to confirm their > relationship to you and to participate in sixdegrees themselves > by listing their contacts. > >WHAT TO DO NEXT: > > Just reply to this e-mail by following the INSTRUCTIONS below > (you may want to print it out first - it's easier that way.) > > > And remember to visit http://www.sixdegrees.com/. Click on Services, > log-in with your password, which is cusproll, and enjoy > networking on a whole new level. > >=================================================================== >INSTRUCTIONS FOR REPLYING: > >FIRST: > > Click your mail program's REPLY button. > >SECOND: > > On the FIRST line of the message body of the reply e-mail that > opens, type only the word CONFIRM or DENY to let us know if you > are in fact Stanton's Acquaintance. > >THIRD: > On the next line of the message body list the first and last names > and e-mail addresses of at least TWO people you know, and the > relationship numbers that correspond with how those people are > related to you. > >MAKE SURE: > >* That the first name, last name, e-mail address and relationship > number are separated by SEMI-COLONS. > >* You list at least TWO people if you want to become a member. > (You can list as many as you want - the more you list, the > larger your network of contacts will be.) > >* Each entry is on its OWN LINE. > >* You follow the format of these examples: > > John; Smith; jsmith(a)fakeplace.com; 12 > Jane; Doe; superjane(a)fakeplace.com; 3 > >* And that you define each relationship by choosing a number from > this list: > > 1=wife 2=husband 3=life partner > 4=significant other 5=mother 6=father > 7=sister 8=brother 9=daughter >10=son 11=other family member 12=friend >13=employer 14=employee 15=co-worker >16=client 17=service provider 18=business contact >19=fellow alum 20=acquaintance > > >FOURTH: > > Click send, and that's it. We look forward to hearing from you. > >=================================================================== > >** PLEASE NOTE: All replies to this address are processed by a > computer. If you have any problems, questions or requests send an > e-mail to issues(a)sixdegrees.com and someone will get back to you > as soon as possible. > >** If you'd rather not participate in sixdegrees and would prefer > not to receive any further e-mails from us at this time, please > send an e-mail to remove(a)sixdegrees.com that says "REMOVE ME". > >=================================================================== > > > >E.DB.ANB.1 >

1 0

Re: Continuing spam from vulis
by Tim May 17 Dec '03

17 Dec '03

(I've removed 9 of the addresses from this response.) At 12:42 PM -0700 5/30/97, Jeff Burchell wrote: >I have previously talked with the operator of the cypherpunks list (this >was about 2 months ago when someone else was abusing the remailer to post And just who is "the operator of the cypherpunks list"? If this was about 2 months ago, it would've been well after the Cypherdiaspora, so there would be even less of a concept of the "operator" than there was before. And why would he or she or they have anything to say about blocking remailers? >trash to that list). At that time, I offered the standard good will >gesture that remailer operators can offer: "Would you like me to block the >list, so this remailer won't send anything to it". Because of the nature >of anonymous remailers, this is about the extent of the action that I can >take. > >To this, I recieved a very firm "no!" (cypherpunks is of course a list >where people do have good reasons to use remailers). Because of that, I >_WON'T_ block cypherpunks, until I am instructed to by May, Gilmore, >Hughes, et.al. Period. This holds true for all mailing lists. I need to >have authorization from the list maintainer to block the list. Neither May nor Gilmore nor Hughes have any say over blocking remailers, blocking use of remailers, etc. >-Jeff >Operator... Huge.cajones.com > >P.S. Besides... aren't ad hominum attacks on Tim May a Cypherpunks > tradition? I mean no disrespect to Jeff, but even getting involved in the slightest way in debates about remailer traffic and what should/should not be blocked is what can only be called a "conceptual error." Ideal mixes, which today's remailers are of course only an approximation of, do not pass and reject messages based on content, or even on sources and destinations. The ideal mix is a soulless black box executing certain protocols. (Practicality may dictate that a remailer place certain minimal, and hopefully publicized, constraints on the process, e.g., no sending to whitehouse.gov, no sending to hundreds of addresses, whatever.) --Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

Elliptic Curve Rumor
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 30 May 1997 10:53:16 -0700 To: Robert Hettinga <rah(a)shipwright.com> From: Somebody Subject: Elliptic Curve Rumor Mime-Version: 1.0 I assume you will pass this information on. Please don't associate my name with it. I have heard that Apple has a working implementation of Elliptic Curve Cryptography. Because of the export regulations they don't want to include it in their products. If anyone wants to try to change their minds, now would be a good time. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

2 1

Janus (now called LPWA) ready for pre-testing)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 30 May 1997 13:31:25 -0400 From: alain(a)research.bell-labs.com (Alain Mayer) To: rah(a)shipwright.com Subject: Janus (now called LPWA) ready for pre-testing) Cc: alain(a)research.bell-labs.com Hi Robert, the Janus system I presented at FC97 is now running on a proxy at Bell Labs, accessible to everyone. Maybe you can send the announcement below to the fc97 mailing list? Many thanks and I hope everything is fine with you, -- Alain ======================================== Hi, Janus (now called the Lucent Personalized Web Assistant, LPWA) is now pre-testing. Its main goal is to increase convenience, security, and privacy for browsing the web, especially with sites that require registration (and hence user names, passwords and e-mail addresses). We hope that you will use it for a while and give us some feedback on what you like and what kind of things are annoying. Note, that you can only participate if you are able to configure your browser to directly connect to our proxy. Some of you might be behind a firewall or ISP where a particular proxy is required. Instructions can be found at http://lpwa.com:8000. More on the project is located at http://www.bell-labs.com/project/lpwa/ An arbitrary list of (free) sites which require registration can be found at http://www.bell-labs.com/projects/lpwa/extended_summary_tmp.html#account Please note that this project has not yet been publicy announced and that documentation and code are currently being revised. Also, the current set-up, where you have to connect to LPWA/Janus over an insecure connection is not "optimal" (to say the least, but all in all much better than if you browse the "usual way"). Hence, we are really looking for "friendly users" at this time whose feedback might help us to make improvements. Regards, -- Alain --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Rotenberg as the Uber Enemy
by Tim May 17 Dec '03

17 Dec '03

I suppose I am developing a reputation amongst the Inside the Beltway Cyber Rights Groups (tm) as a pain in the ass, but nearly everytime I see one of their chief spokeswonks giving a policy statement I realize they are "not on my side." The latest quote is from Marc Rotenberg, on a CNN piece on spam and anti-spam legislation, saying that what the legislators in Congress really need to look into is how the spammers develop their data bases..... Incredible. Does he propose investigations of private data gathering? Perhaps search warrants served on those who take public postings and construct data bases? Look, I'm annoyed by getting 5-10 "unwanted" spam messages a day. But I realize the "spammers" are merely taking publicly available (= legally available, as 99.99% of all such information is) information and using legal channels to contact me. I may not "like" it, but their behavior is as legal as someone calling me on the phone. (And ny nearly any measure of hassle factor, dashing to get to the phone only to find it's a salesman selling something I don't want is worse than any 20 unwanted e-mail messages.) So, Marc Rotenberg wants Congress to "look into" (= interfere with) compilation and use of public information. These people are NOT our allies. --Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

24 76

Seismic Data Authenticator
by John Young 17 Dec '03

17 Dec '03

Bill Payne has provided his 1992 Sandia report: "Data Authenticator for the Deployable Seismic Verification System" Marked "For Official Use Only." The 185-page paper describes in fine detail the design, data security and fabrication (with photos and technical drawings) of the third generation authentification device for verfiying seismic data in connection with the nuclear weapons control-START treaties with the USSR. The paper also cites deficient cryptographic algorithms provided by NSA for the device. http://jya.com/da/whpda.htm (98K)

1 0

legal EAR work-around/Paper based remailers
by Adam Back 17 Dec '03

17 Dec '03

EAR says that you can't export crypto in electronic form. EAR says you can export crypto in textual form. We have electronic cash in terms of MT banks digicash. Email is more convenient for exporting crypto source code and binaries that snail mail. Let's do it. Here's what we need: 1. US entrepreneur to accept mail with :: Snail-To: <street address (outside US)> Snail-Fee: <Fee + 2c/sheet + postage stamp charge, digicash> Scanning-Fee: <50c/sheet, digicash> Request-Remailing-To: <cypherpunks(a)cyberpass.net> Anon-Post-To: alt.cypherpunks US volunteer strips off first two headers, prints out the document in a large OCR friendly font. Puts in envelope and posts at highest priority snail that can be paid for out of the included postage (overnight/air-mail/slow-boat). 2. Non-US entrepreneur to scan and remail results :: Scanning-Fee: <50c/sheet, digicash> Request-Remailing-To: <cypherpunks(a)toad.com> Anon-Post-To: alt.cypherpunks US volunteer scans the sheets, mails/post them to the requested email address/newsgroup, and collects his digicash fee per sheet. I volunteer for #2. (You understand the importance of the Scanning-Fee, I can pay someone to feed sheets into a scanner if needs be with a fee, without that I can become overloaded with a ream of paper representing the binary for PGP5.0). Legal questions: I'd be interested in legal interpretations of whether the above scheme is legal for the US entrepreneur. Peter Junger said a short while ago on the list that printed material could be exported under the EAR regulations administered by Commerce Dept. Does this scheme qualify? Technical questions: If this is to include uuencoded or radix-64 mime encoding, we might want to think about redundancy to allow error correction. Perhaps we want that anyway to ensure that what we have is 100% character-by-character perfect. Or perhaps not as it may damage the legality aspects. They may start saying that you can only export human readable stuff on paper, etc. Then we move on to `texto' apparently human readable steganographically encoded paper based remailer messages. Adam -- Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

4 5

No Subject
by Secret Squirrel 17 Dec '03

17 Dec '03

http://www.datafellows.com/gallery/ F-Secure SSH 1.0 Windows Client pc_ssh.com - removes time-limit. Copy into SSH-directory and execute. pc_ssh.com in ASCII: -----BEGIN PGP MESSAGE----- Version: 2.6.2 owFbczSJqyA5vrg4Qy85P5cBCPYlML6wZ9hiu4FpVwjjWcUihcUxjFucNjB0y8Uw 7joTsJOB4aziFoedTAy74oDSr7kn7OtlfMHHsMXnrOK+5YwvWMCsLhG3hl8MJWxb mIBKPh0ODvbQc41wBZr+uvSfgptucGpyaVGqAlBYocxQz0DBuSgxOVtBV1ehKrMo OT9PQV+hINnSnJeL4Z+Ca1FRfpGCf0FqXmZeugLUILCMc35uQU5qSaoikAcA =KINJ -----END PGP MESSAGE----- WarezMonger

1 0

A New Law Could Take Care Of The Problem
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

* In a September statement, Joseph Sniezek, an official of the Centers for Disease Control's National Center for Injury Prevention, lamented the serious injuries suffered by rodeo bull riders and suggested a solution might be to require helmets. ...and seat belts? (When the law is passed to require this, don't be surprised if they tack on requirements regarding the use of child-seats for those riders who take the children along. And of course, if they have a copy of PGP in their pocket when they ride without a helmet...}

1 0