December 2003 - cypherpunks-legacy

Re: SynCrypt: the new PGP?
by Jim Russell 17 Dec '03

17 Dec '03

>>Anybody heard of syncrypt? I have. Of course, being one of its authors, that's to be expected. >>File wiping, group encryption, automatic encryption of files put in certain directories... hiding encrypted files in pictures! True, true, true and true. I might add that the Secure Delete file wiping passes Kent Briggs' "Directory Snoop" check on Windows 95. >>It pulls them back out again too. We'd have some unhappy customers if it didn't. <g> >>Plus it has an interesting "20 questions" method for backing up your passphrase. For the algorithmically inclined among us, this was implemented via Shamir's secret-sharing scheme. There was also a great deal of discussion about what questions to ask -- "What's your favorite color?" doesn't provide as much entropy as "What was the last name of your favorite grade school teacher?", for example. >>Bruce Schneier is working with them, so they should have good crypto. Yes, having Bruce and his colleague Chris Hall consulting with us was invaluable. They beat up on us pretty good during the betas, which is exactly what we wanted. >>No gak or even cak in sight. Absolutely true. Our enterprise level product, SynCrypt Gold, is currently in development, and its data recovery features will be implemented in such a way that it could *never* become an infrastructure for GAK. Jim Russell <jrussell(a)syndata.com> Chief Software Engineer SynData Technologies, Inc. http://www.syncrypt.com

1 0

To TruthMonger
by snow 17 Dec '03

17 Dec '03

Forwarded message: > snow wrote: > > You must live in such a nice world, where the sky is always blue, > > the grass always green, and the police eager and willing to serve a happy > > populace. > > Can I come live in your world? > snow > take two of the green ones, three of the yellow ones, and four of the > red ones But But But all I have are little pale blue ones, and big honkin white ones.

1 0

I Hold These Truths To Be Self-Evident
by TruthMonger 17 Dec '03

17 Dec '03

BASIC TRUTHS Everyone has a photographic memory. Some don't have film. A day without sunshine is like, night. Diplomacy is saying "nice doggy " until you find a rock. Change is inevitable, except from a vending machine. Back up my hard drive? How do I put it in reverse? I just got lost in thought. It was unfamiliar territory. When the chips are down, the buffalo is empty. Seen it all, done it all, can't remember most of it. Those who live by the sword get shot by those who don't. I feel like I'm diagonally parked in a parallel universe. He's not dead, he's electroencephalographically challenged. You have the right to remain silent. Anything you say will be misquoted, then used against you. I wonder how much deeper would the ocean be without sponges. Despite the cost of living, have you noticed how it remains so popular? Nothing is foolproof to a sufficiently talented fool. Atheism is a non-prophet organization. He who laughs last, thinks slowest.

1 0

www.cypherpunks.to
by Anonymous 17 Dec '03

17 Dec '03

What happened to www.cypherpunks.to? It appears to have disappeared.

2 1

Re: Why porn must be stopped at all costs, by Jodi Hoffman
by wabe 17 Dec '03

17 Dec '03

Dear Jodi- So occasionally I like to turn these arguments around in my head: Why should the smart, mature people under 18 in this country be penalized because your immature, mentally retarded and over-fragile kids can't seem to handle the sight of naked people? What if I wanted to protect my children from the evils of Christianity? Could I ban that from the internet with the same sort of high horse the anti-porn people seem to be riding? And damage and change are completely different things. We're all changed by our experiences. Some people among us were apparantly beat over the head with dirty pictures as children and are now horribly afraid of them. The other bits in her letter (The bible being thrown out of public schools for example) were just plain lies. It's sad that when most of America has to chose between its essential freedoms and the most trivial of protection from objectionable thought, that we chose to lose the freedoms. _______________________________________ -wabe

2 1

Charityware
by Tim May 17 Dec '03

17 Dec '03

My advice to Monty Cantsin or whomever actually wrote this: write shorter pieces! The quote-and-coment style, especially for very long pieces, usually results in people skipping huge sections, or the whole thing. I only scanned this and stopped when I saw the word "cryptoanarchist." At 4:41 AM -0700 11/3/97, Mix wrote: (quoting someone else) >>New payment models will need to come in. How can you extract money >>from a cryptoanarchist? Copyright? Patent? Hah, hah. > >The important thing is establishment of the custom. Most >cryptoanarchists with class will pay. The way to do this is to make >it clear from day one that it is not free software. If you want to >run it, you should buy it. (The problem with share ware is that people >get used to "borrowing" it.) _This_ cryptoanarchist will almost _never_ pay for that which is free. If someone gives me something, no strings attached, and then says, "Oh, the "suggested donation" is $10," I tell them that they should have charged me that in the first place. (I'm obviously not fond of leftie events which are advertised as free, but which require a mandatory voluntary "suggested donation.") More to the point, I use various freebies I get off the Net. Some of them have obscure schemes for sending payments to the alleged authors. Too much hassle. And if it's _free_, why pay anything? Charityware is not a viable business model. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Re: Terrorism is a NON-THREAT (fwd)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

snow wrote: > > > People kill for religion, politics, insanity, and fun. > > Nope. Economics, survival, revenge, and insanity. Nope. Voices inside my head.

1 0

Re: Why porn must be stopped at all costs, by Jodi Hoffman
by nobody＠neva.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Declan "Socrates" McCullagh wrote: >[Wow. First time I've ever been personally accused of being "a major >reason for the downward spiral of society." --Declan] > > >---------- Forwarded message ---------- >Date: Mon, 03 Nov 1997 11:53:27 -0500 >From: Jodi Hoffman <jlhoffm(a)ibm.net> >To: fight-censorship(a)vorlon.mit.edu >Subject: Why porn must be stopped at all costs..... > >ALL: >I've forgotten how long I've been on this email list. Maybe too long. > >Try as I might, I cannot forget standing on the steps of the Supreme >Court building with my husband and 10 year old daughter in the >freezing drizzle. I really thought we could make a difference, >standing there with our banner and signs, one of which read, "DON'T >SACRIFICE MY CHILD ON THE ALTAR OF THE FIRST AMENDMENT." Stupid me. >As the saying goes...we've come a long way, baby. > >As I wander back through all the posts on this list, it finally dawns >on me what this is all about, this 'fight censorship' rhetoric. It's >nothing more and nothing less than a lot of egotistical, self-serving >brats who absolutely refuse to grow up, including you, Declan. Don't >you realize that YOU are a major reason for the downward spiral of >society? Instead of trying to protect children, you want to empower >them. Even a moron knows that when you do so, that power has to be >taken from someone. Unfortunately, that someone is the parent. I >have to ask myself just how many on this list have children. Not >many, I would say. Hoffman's claim that she is unable to control what her child sees is weak. It's easy enough keep kids off the Net. It's easy to buy software that only reveals approved parts of the Net. So what is it about our Constitution that Hoffman finds so offensive? It certainly doesn't harm her own child. If we were to be charitable, we would say that she is concerned about other people's children seeing pornography. The only problem is, that the parents of these children are just as able as she is to control their involvement with the Net. Yet, apparently, she is unhappy with the choices these parents are making and wishes to overrule them. At best, this is inconsistent with her claim that she believes parents should decide what their own children see. If we were to be accurate, instead of charitable, we would observe that it is most likely that Hoffman is offended by pornography in general, no matter who sees it. For instance, this statement refers to an adult, not a child: "So, keep protecting your porn-induced orgasms." Rather than stating her beliefs openly and honestly, she is hiding behind children, particularly her own child, to put promote her outrageous, unconstitutional, and un-American totalitarian policies. (Hoffman may not even be completely conscious of her own motivations. Often, this sort of person begins with an agenda, and then works him or herself up into a rage using other reasons for the justification, somewhat reminiscent of the "Two Minute Hate" sessions described in Orwell's "1984".) I said a few days ago that people who would use the excuse of protecting children to promote their own twisted agenda are the lowest of the low. Hoffman is, I believe, a perfect example. I pity her child. This is also a good example of why the use of remailers is advisable. It lowers the odds that some whacko will come after you with an axe. Monty Cantsin Editor in Chief Smile Magazine http://www.neoism.org/squares/smile_index.html http://www.neoism.org/squares/cantsin_10.htm -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBNF5DqZaWtjSmRH/5AQEoXAf+Ie7zmRl8+PJRZbrFILK7crgyCPZX6LRw tVctKgWgmGlAVWbCyNeAJj6Y3AqBF1gwzhcSkY9OBMmcBYXEf23xi+5UkipD4rJ7 3QGDapph7F94tWzsSeO2NzTVUadawoE7bNl5lL5SaBjXoPpBkH96OAxHJ6zgobAA K/6z3QBeEDrUeP7pHmmBBVY6X3Z5b8CJGhuqP/gMifl2RsvU/xvFz6LWtRkzR389 zs0UsqDxKQ3yH8Bjdt85dVsyiwSzrLFjQVLNO2JNvOQDgwMpusB4KnMcgp13vgm4 xZ0j9y2EJBgekNwb0sC35BWkACZOuJSSG4bMGuWZR7NP3O/YaV19EA== =zPYs -----END PGP SIGNATURE-----

1 0

RSA Blows Smoke
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Wierd News RSA Blows Standards Smoke James Glave james(a)wired.com" 6:16pm 31.Oct.97.PST http://www.wired.com/news/news/business/story/8196.html Today's announcement "http://www.rsa.com/smimelive/html/9710311.html" by RSA Data Security stating that the company has formally applied to the Internet Engineering Task Force to establish an email security standard is a blatant lie rooted in greed, allege sources close to the process. "RSA is lying, and I am really livid," said Paul Hoffman of the Internet Mail Coalition. "RSA has not submitted anything." The flap centers around the company's ongoing efforts to get its proprietary S/MIME email encryption technology endorsed as a standard by the task force. Such an endorsement would give the company credibility, and potentially, an increased market share over rival Pretty Good Privacy. PGP submitted a competing protocol for standards consideration last month. The Internet standards process is lengthy and complicated at best. The sticking point in RSA's efforts to date is that the task force will only consider non-proprietary technologies for the standards track. But S/MIME 2, the protocol at the heart of the effort, includes core RSA technologies that must be licensed. To be considered for standardization, RSA must relinquish "change control," or the ability to modify the technology, to the task force. And the portion the task force is most interested in altering is the portion that requires RSA technology. As a result, getting change control "has been like pulling teeth," claims Jeff Schiller, the organization's security director. "Their goal has always been get this into the IETF but don't really give up control," said Schiller. "[They want to] make sure that when the standard comes down, if an anyone wants to implement it then they have to be a licensee." Schiller says that until change control is secured, RSA has no hope of coming near a formal application - as they had claimed to have already done this morning. RSA, however, claims that it has granted change control. "They are trying to get more market share by claiming that the IETF is endorsing their commercial product," alleged Schiller. RSA, in fact, is only one of five groups that have worked on S/MIME 2, which is about to be submitted by the Internet Mail Coalition to the IETF as an informational request for comments. Now, in order to retain its hold on the S/MIME technology, RSA is taking sole credit for submitting it to the task force, some observers claim. "It's totally disacknowledging the work of a lot of other people," said Hoffman. A request for comments is one of the initial steps in the certification process, and Hoffman says that the Internet Mail Coalition has yet to put S/MIME 2 forward. Further, Schiller says, "When we do, it is not trying to get it as an Internet standard. It won't go - and therefore we are not going to try." Hoffman reiterated that S/MIME 2 won't be an Internet standard because it relies on proprietary security technology and weak encryption. The Internet Mail Coalition is about to begin work on S/MIME 3, which will use stronger encryption and true open standards. Tim Matthews, product manager for RSA, acknowledged that the announcement may be open to misinterpretation. "It's basically a summation of all the work we've been doing over the past month," he said. Instead of helping its own cause, and gaining public mindshare, RSA's announcement may end up flying back in its face. "If it fragments the S/MIME camp it could help PGP a bit," said Charles Breed, director of technology for competitor PGP. "I hope [the announcement] hasn't sunk their chances because there are still a lot of people who want to do S/MIME," said Hoffman. "RSA's greediness could sink this, but I really hope it doesn't." - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBNFx0To9Co1n+aLhhAQHzQwQAwfbrjUYnFP2Q72Zbld6zDOeprNWV/9Lc fzGy7wiS0Jewx9dgMxMw1jHonlqLak469XzJzJVbSnGpvfpau1QJjWus1sKDbUeL YC87k71t7vTcnWumqnsndlItwbn8AVw5TRLqRxsF+cz4PaspIAx4hIY8V9jDBIk6 EY9J1FSeFkg= =SINu -----END PGP SIGNATURE-----

3 3

PGP compatibility
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

Lucky Green wrote: >Of course your copy of PGP 5.0 is compatible with prior versions. I know >this, you know this, and the anonymous author claiming otherwise knows >this. He simply hopes that there are some people that don't know this. The >idea behind the original post and others like it over the last few days is >to spread FUD about PGP 5.0 after other attacks failed for lack of merrit. >If you repeat a lie often enough, eventually some people will believe you. >PSYOPS 101. Let's not fall for it. >[Yes, I know that DSA keys can not be read by PGP 2.6. Neither will Word >1.0 read Word 7.0 files. So what?] Let me guess, Lucky, you're using Windows, right? If I was a Windows user exclusively I probably wouldn't give a damn either. Robert's version is compatable because he's gone to strides to *make* it compatable. Most users haven't done this. PGP Inc. has taken a *multi-platform* *network-wide* system and broken it. They released a Windows version months ago completely severing lines of communication between 5.0 and 2.x users. Finally, after months, they get around to releasing a UNIX version so that everybody else can use PGP 5.x. Of course the damned thing *still* isn't stable, *still* has a timebomb in it, and *still* has the command line broken. PGP Inc. recommends that people report bugs, get new versions, etc. at http://beta.pgp.com, but as was covered in detail in another posting that site is a pretty much disabled (or incomplete if you want to think of it that way). Microsoft Word is something completely different. We aren't distributing Word 7.0 documents all over the Internet as a standard communications practice. When I encrypt a message to you using PGP 2.6, I'm using a version of a program which is released for certain platforms. When I encrypt a message to you using PGP 5.0 I'm using a version which is released for certain platforms, but not all the platforms 2.x was available on. 5.x produces messages which are incompatable with 2.x. As a result 2.x users, which includes the UNIX community (which, last I checked, was rather large), are excluded from the message traffic the Windows users are sending around. Of course I'm talking about signatures and sometimes encryption, but, again, last I checked that was a major reason to use PGP in the first place. Then again, given the quality of the average Window user's message traffic on the network today maybe that isn't such a great loss. It should be worthy of note that I'd be using one of the betas for 5.x right now if the PGP folks hadn't purposefully broken every script known to man. I can comment out the timebomb for the expired (i.e. broken in yet another way) versions they're releasing, or at least were as of last week. Let's redefine SMTP, NNTP, FTP, and HTTP so that they looks nothing like what currently exists, install it on major providers, and write a set of UNIX clients. When Windows and Mac users complain about this we can all stand up proudly and proclaim that they'll just have to wait a few months for somebody to write the software which will allow them to again take part, and that their complaining about this completely idiotic tactic is "FUD". And, of course, since the SMTP2, NNTP2, HTTP2, and FTP2 protocols are so much better than their previous versions (that wouldn't be too hard) this is all very smart and nobody should mind. If PGP Inc. had released a sane UNIX version along with their Mac and Winblows versions there would be considerably less bitching happening right now. Hell, they could have released patches for 2.6. Instead they've waited months and still don't have one out which works.

3 2

Monty Cantsin README
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

Please post your public key somewhere. There's a variety of keyservers, or even to this list would be adequate. KeyMonger

1 0

NSA, Crypto AG, and the Iraq-Iran Conflict
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

------- Forwarded Message From: KALLISTE(a)delphi.com Date: Mon, 03 Nov 1997 02:51:51 -0500 (EST) Subject: SNET: NSA, Crypto AG, and the Iraq-Iran War To: snetnews(a)world.std.com - -> SearchNet's SNETNEWS Mailing List NSA, Crypto AG, and the Iraq-Iran Conflict by J. Orlin Grabbe One of the dirty little secrets of the 1980s is that the U.S. regularly provided Iraq's Saddam Hussein with top-secret communication intercepts by the U.S. National Security Agency (NSA). Consider the evidence. When in 1991 the government of Kuwait paid the public relations firm of Hill & Knowlton ten million dollars to drum up American war fever against the evil dictator Hussein, it brought about the end of a long legacy of cooperation between the U.S. and Iraq. Hill & Knowlton resurrected the World War I propaganda story about German soldiers roasting Belgian babies on bayonets, updated in the form of a confidential witness (actually the daughter of the Kuwaiti ambassador to the U.S.) who told Congress a tearful story of Iraqi soldiers taking Kuwaiti babies out of incubators and leaving them on the cold floor to die. President George Bush then repeated this fabricated tale in speeches ten times over the next three days. What is remarkable about this staged turn of events is that, until then, Hussein had operated largely with U.S. approval. This cooperation had spanned three successive administrations, starting with Jimmy Carter. As noted by John R. MacArthur, "From 1980 to 1988, Hussein had shouldered the burden of killing about 150,000 Iranians, in addition to at least thirteen thousand of his own citizens, including several thousand unarmed Kurdish civilians, and in the process won the admiration and support of elements of three successive U.S. Administrations" [1]. Hussein's artful slaughter of Iranians was aided by good military intelligence. The role of NSA in the conflict is an open secret in Europe, the Middle East, and Asia. Only in this country has there been a relative news blackout, despite the fact that it was the U.S. administration that let the crypto cat out of the bag. First, U.S. President Ronald Reagan informed the world on national television that the United States was reading Libyan communications. This admission was part of a speech justifying the retaliatory bombing of Libya for its alleged involvement in the La Belle discotheque bombing in Berlin's Schoeneberg district, where two U.S. soldiers and a Turkish woman were killed, and 200 others injured. Reagan wasn't talking about American monitoring of Libyan news broadcasts. Rather, his "direct, precise, and undeniable proof" referred to secret (encrypted) diplomatic communication between Tripoli and the Libyan embassy in East Berlin. Next, this leak was compound by the U.S. demonstration that it was also reading secret Iranian communications. As reported in Switzerland's Neue Zrcher Zeitung, the U.S. provided the contents of encrypted Iranian messages to France to assist in the conviction of Ali Vakili Rad and Massoud Hendi for the stabbing death in the Paris suburb of Suresnes of the former Iranian prime minister Shahpour Bakhtiar and his personal secretary Katibeh Fallouch. [2] What these two countries had in common was they had both purchased cryptographic communication equipment from the Swiss firm Crypto AG. Crypto AG was founded in 1952 by the (Russian-born) Swedish cryptographer Boris Hagelin who located his company in Zug. Boris had created the "Hagelin-machine", a encryption device similar to the German "Enigma". The Hagelin machine was used on the side of the Allies in World War II. Crypto AG was an old and venerable firm, and Switzerland was a neutral country. So Crypto AG's enciphering devices for voice communication and digital data networks were popular, and customers came from 130 countries. These included the Vatican, as well the governments of Iraq, Iran, and Libya. Such countries were naturally skeptical of cryptographic devices sold in many NATO countries, so turned to relatively neutral Switzerland for communication security. Iran demonstrated its suspicion about the source of the leaks, when it arrested Hans Buehler, a top salesman for Crypto AG, in Teheran on March 18, 1992. During his nine and a half months of solitary confinement in Evin prison in Teheran, Buehler was questioned again and again whether he had leaked Teheran's codes or Libya's keys to Western powers. Luckily Buehler didn't know anything. He in fact believed in his own sales pitch that Crypto AG was a neutral company and its equipment was the best. They were Swiss, after all. [3] Crypto AG eventually paid one million dollars for Buehler's release in January 1993, then promptly fired him once they had reassured themselves that he hadn't revealed anything important under interrogation, and because Buehler had begun to ask some embarrassing questions. Then reports appeared on Swiss television, Swiss Radio International, all the major Swiss papers, and in German magazines like Der Spiegel. Had Crypto AG's equipment been spiked by Western intelligence services? the media wanted to know. The answer was Yes [4]. Swiss television traced the ownership of Crypto AG to a company in Liechtenstein, and from there back to a trust company in Munich. A witness appearing on Swiss television explained the real owner was the German government--the Federal Estates Administration. [5] According to Der Spiegel, all but 6 of the 6000 shares of Crypto AG were at one time owned by Eugen Freiberger, who resided in Munich and was head of the Crypto AG managing board in 1982. Another German, Josef Bauer, an authorized tax agent of the Muenchner Treuhandgesellschaft KPMG, and who was elected to the managing board in 1970, stated that his mandate had come from the German company Siemens. Other members of Crypto AG's management had also worked at Siemens. Was the German secret service, the Bundesnachrichtendienst (BND), hiding behind the Siemens' connection? So it would seem. Der Spiegel reported that in October 1970, a secret meeting of the BND had discussed how the Swiss company Graettner could be guided into closer cooperation with Crypto AG, or could even merged with it. The BND additionally considered how "the Swedish company Ericsson could be influenced through Siemens to terminate its own cryptographic business." [6] A former employee of Crypto AG reported that he had to coordinate his developments with "people from Bad Godesberg". This was the location of the "central office for encryption affairs" of the BND, and the service instructed Crypto AG what algorithms to use to create the codes. The employee also remembers an American "watcher", who strongly demanded the use of certain encryption methods. Representatives from NSA visited Crypto AG often. A memorandum of a secret workshop at Crypto AG in August 1975, where a new prototype of an encryption device was demonstrated, mentions the participation of Nora L. Mackebee, an NSA cryptographer. Motorola engineer Bob Newman says that Mackebee was introduced to him as a "consultant". Motorola cooperated with Crypto AG in the seventies in developing a new generation of electronic encryption machines. The Americans "knew Zug very well and gave travel tips to the Motorola people for the visit at Crypto AG," Newman told Der Spiegel. Knowledgeable sources indicate that the Crypto AG enciphering process, developed in cooperation with the NSA and the German company Siemans, involved secretly embedding the decryption key in the cipher text. Those who knew where to look could monitor the encrypted communication, then extract the decryption key that was also part of the transmission, and recover the plain text message. Decryption of a message by a knowledgeable third party was not any more difficult that it was for the intended receiver. (More than one method was used. Sometimes the algorithm was simply deficient, with built-in exploitable weaknesses.) Crypto AG denies all this, of course, saying such reports are ""pure invention". What information was provided to Saddam Hussein exactly? Answers to this question are currently being sought in a lawsuit against NSA in New Mexico, which has asked to see "all Iranian messages and translations between January 1, 1980 and June 10, 1996". [7] The passage of top-secret communications intelligence to someone like Saddam Hussein brings up other questions. Which dictator is the U.S. passing top secret messages to currently? Jiang Zemin? Boris Yeltsin? Will Saddam Hussein again become a recipient of NSA largess if he returns to the mass slaughter of Iranians? What exactly is the purpose of NSA anyway? One more question: Who is reading the Pope's communications? Bibliography [1] John R. MacArthur, Second Front: Censorship and Propaganda in the Gulf War, Hill and Wang, New York, 1992. [2] Some of the background of this assassination can be found in "The Tehran Connection," Time Magazine, March 21, 1994. [3] The Buehler case is detailed in Res Strehle, Verschleusselt: der Fall Hans Beuhler, Werd Verlag, Zurich, 1994. [4] "For years, NSA secretly rigged Crypto AG machines so that U.S. eavesdroppers could easily break their codes, according to former company employees whose story is supported by company documents," "No Such Agency, Part 4: Rigging the Game," The Baltimore Sun, December 4, 1995. [5] Reported in programs about the Buehler case that were broadcast on Swiss Radio International on May 15, 1994 and July 18, 1994. [6] "Wer ist der befugte Vierte?": Geheimdienste unterwandern den Schutz von Verschlusselungsgeraten," Der Spiegel 36, 1996. [7] U.S. District Court for the District of New Mexico, William H. Payne, Arthur R. Morales, Plaintiffs, v. Lieutenant General Kenneth A. Minihan, USAF, Director of National Security Agency, National Security Agency, Defendant, CIV NO 97 0266 SC/DJS. - -> Send "subscribe snetnews " to majordomo(a)world.std.com - -> Posted by: KALLISTE(a)delphi.com ------- End of Forwarded Message

1 0

PGP and Compliance with SEC and Liability Rules
by Tim May 17 Dec '03

17 Dec '03

A few weeks ago I said that I thought the real reason for PGP's CMR features and Policy Management Agent had little to do with the reasons being discussed (by PGP employees, amongst others), things like "What if Joe is not at his desk and his boss wants to access his encrypted e-mail?" (and variants). I explicitly speculated that the real reason had more to do with snooping on employees, with the corporate security and IS departments monitoring what is being sent and received, etc. I even mentioned compliance with SEC, FTC, and other agency rules. (And I'm not saying such compliance isn't a valid concern, even a mandated concern. And I'm not questioning the property rights of business owners to enforce policies on their property with their equipment as they see fit. I just think PGP is being disingenuous in saying they are not actually building in snoopware. They are, and the very same objections Phil Zimmermann had to Viacrypt's snoopware applies to PGP 5.5 and its "Policy Management Agent.") Well, it appears the real reason is now emerging. In the 1997-10-27 issue of "Macweek," an article on corporate use of crypto, including PGP, appears. "Mac encryption finding its way into corporations," by Larry Stevens, p. 27. Much discussion of crypto, symmetric vs. asymmetric approaches, reasons companies haven't been using crypto, etc. The final paragraph summarizes a key point: "The Gartner Group's Wheatman pointed out that PGP Policy Management Agent allows corporatins for the first time to centralize control over encryption: "For encryption to be accepted, IT had to gain control. This isn't Big Brother; this is necessary to comply with liability laws and SEC regulations."" Note: I presume "IT" stands for Information Technology, or somesuch. That is, some corporate Information Services or Computer Services group. In other words, snoops in some department need to use the Policy Management Agent to monitor messages. Perhaps PGP, Inc. will say that Gartner Group does not speak for them. Fair enough. But I think the Gartner comments correctly capture the real reason we hear that corporations are insisting on snoopware. And, incredibly dangerously for us all, why the SEC, FTC, OSHA, IRS, and other agencies may seize on CMR as a feature which "must" be turned on, with archives of messages kept, etc. Were I a bureaucrat in their shoes, I know I would certainly want CMR mandated. "Not for Big Brother, but to ensure compliance with corporate regulatory rules." This is the dangerous world PGP, Inc. is helping to build. And I expect now that RSADSI will enter this snoopware arms race and thus the escalation will begin in earnest. Sadly, had PGP kept true to its core foundations of personal privacy, it might have been able to exert some moral guidance and slow down this headlong rush into a snoopware world. But by becoming the annointed leader of Corporate Message Recovery and Policy Management Agent products, the other companies can jump in with their own snoopware products, pointing to PGP. Sad. Very sad. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Need info! / Re: Export a random number, go to jail
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim May wrote: > > At 9:46 AM -0700 11/3/97, Peter D. Junger wrote: > > >: One time pads are under rated, in my view. Not only are they secure > >: forever, but the executive branch of the U.S. government says they are > >: exportable. > > > >If your basis for saying that the U.S. government says that one time > >pads are exportable was the governments classification of a one time > >that I wrote in DOS assembly language using XOR to munge together the > >contents of two files, I don't think that you can rely on that > >authority since, at the same time, the government refused to rule that > >all one time pads using XOR are not subject to licensing under the > >EAR. > > "Export a random number, go to jail." Is it legal to export '37'? How about '148'? '276'? '3,289,534'? '6.33458'? Thanks, A Fucking Iditot

3 2

Re:
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

>On Sat, 1 Nov 1997, Anonymous wrote: >> If I were someone who wanted to make the internet look like a place >> that needed STRONG governmental controls I would put the words >> terrorists,criminals,pornographers,drug dealers/addicts, > >Fnord. > I have been wondering about all the media attention on "aids assasins" recently. "With a national list of people infected with the HIV virus, people could be more informed about the people they choose to have sex with" I'm sure that this national list will never be used by corporations when hiring people. It will also never be used to discredit people either, who would say "why are you listening to him, he is a faggot" or "he hangs out with fags, you know how all fags are."

1 0

Re: Why porn must be stopped at all costs, by Jodi Hoffman
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Declan: >[Wow. First time I've ever been personally accused of being "a major >reason for the downward spiral of society." --Declan] Best way to mobilize a society: give them a Devil to hate. It's much easier to get people to hate than to love. Blame the Press, the Permissive Society, the Liberals, the Educational System. Of course, once you get rid of the Devil, it's usually a good idea to have the slave's collars on everyone BEFORE they realize the problem's still around. >---------- Forwarded message ---------- >Date: Mon, 03 Nov 1997 11:53:27 -0500 >From: Jodi Hoffman <jlhoffm(a)ibm.net> >To: fight-censorship(a)vorlon.mit.edu >Subject: Why porn must be stopped at all costs..... [sneck] >Try as I might, I cannot forget standing on the steps of the Supreme >Court building with my husband and 10 year old daughter in the freezing >drizzle. I really thought we could make a difference, standing there >with our banner and signs, one of which read, "DON'T SACRIFICE MY CHILD >ON THE ALTAR OF THE FIRST AMENDMENT." Stupid me. As the saying >goes...we've come a long way, baby. You need a song to cheer you up. Try this one: "There's a place in the world for the angry young man With his working-class ties and his radical plans, He refuses to bend, he refuses to fall, And he's always at home with his back to the wall. He's proud of the scars and the battles he's lost And he struggles and bleeds as he hangs on the cross, And he likes to be known as the angry young man." --Billy Joel, "Angry Young Man" [sneck] >So, keep protecting your porn-induced orgasms. That's exactly what >happened with the Hitler youth, etc... After all, I'm sure it does help >to blur the lines of reality. You clearly need a better country to live in. I suggest China; they have a long history of keeping impure materials out of the hands of the easily influenced sheeple. If you have trouble there, perhaps Singapore, Iraq, Syria, or Lebanon would be more to your liking. If you're interested in a proven weight-loss program, maybe North Korea is your best bet. [sneck] >RULE FOR REVOLUTION #1: CORRUPT THE NATION'S YOUTH Done already, by the gub'mint. Kids can't read or write at all nowadays, despite the high level of per-pupil spending. >RULE FOR REVOLUTION #2: CONTROL THE MASS MEDIA Done already, by the FCC and the religious right. >RULE FOR REVOLUTION #3: ENCOURAGE PUBLIC INDIFFERENCE Done already, by the actions of mudsucker politicians who seek re-election at any cost, even the freedoms guaranteed by the Constitution. "I think I'll vote Demopublican this year, or maybe Republicrat. I have such a hard time telling their extremist positions apart." >RULE FOR REVOLUTION #4: ENCOURAGE PUBLIC BICKERING I could claim this was the reason Usenet was created, but I'm not a conspiracy buff. Of course, on C-SPAN, we can see politicians ranting at each other, the President, and nothing at all. >RULE FOR REVOLUTION #5: SEIZE POWER, THEN CENSOR The religious right again. >RULE FOR REVOLUTION #6: BANKRUPT THE GOVERNMENT See if you can guess who said this and when: "A democracy cannot exist as a permanent form of government. It can only exist until a majority of voters discover that they can vote themselves largess out of the public treasury." Was it: a) Alexander Tytler, 18th century; b) Thomas Jefferson, early 1800s; c) Karl Marx, late 1800s; d) V. I. Lenin, 1915 Here's a hint: Pick the Scottish historian who lived in the 1700s. So the concept of a "bankrupt democracy" has been around for a while. >RULE FOR REVOLUTION #7: DESTROY NATIONAL VALUES Create a climate of fear. Spread uncertainty and doubt among the populace. Wave the battle flags of pedophilia and terrorism proudly from the ramparts, so that people gladly give up their liberties to be saved from the Horsemen of the Apocalypse. >RULE FOR REVOLUTION #8: ATTACK GUN OWNERSHIP If someone were to hang around your child's schoolyard with a full-auto AK-47, would you scream "DON'T SACRIFICE MY CHILD ON THE ALTAR OF THE SECOND AMENDMENT"? >RULES FOR REVOLUTION #9 AND #10: UNDERMINE THE ARMED FORCES Hey, that's one rule! >THE REALITY: >Our country's armed forces consume a vast percentage of our gross >national product. Defense of any kind is wasteful by nature. Even white corpuscles don't do jack when there's no infection to fight. >We possess the best and most advanced weapons systems in the world. But >our armed forces are a joke for two reasons: >(1) they are completely restrained in their actions by a hostile >Congress, and >(2) the armed forces have been saddled with such a bad reputation that >it is virtually impossible to fill the ranks with volunteers, even in >the new and streamlined armed services. Say what? The last I heard, military recruiting was up because it was a way to get training in technical areas that might otherwise be impossible for recruits to learn. (Of course, some people still have to carry rifles...) >FINAL REALITY: WELCOME TO AMERIKA, COMRADES. Land of the Freeh, and the home of the knave. Thanks for making it just a little worse by your actions.

6 6

Re: Copyright commerce and the street musician protocol
by Chris Wedgwood 17 Dec '03

17 Dec '03

Steve Schear <steve(a)lvdi.net> writes: [...] In the second part, Eric predicted that because of the Net's economics and anonymous mailing and publication potential copyrights were on their way out. He acknowledged that some workable method of artist compensation was still needed and proposed the movie industry as a possible model. In this scenario a multi-level money collection and product distribution scheme would be supported by artist reputation and completion bonds. This is just an observation, I have no idea how true this is and if it is to what extent, but... I have several friends who work in the `movie business' and all of these people claim that the "multi-level money collection" system is in fact a very poor system. There is considerable fraud and abuse at all levels (from cinema to production) which means that the end result is that the artists are no paid all they are `owed' and that the consumer pays a premium for what they receive. Without going into details, I can think of many ways that abuse could indeed occur and wouldn't necessarily encourage this type of model for 'net commerce. Perhaps a similar situation exists with books? -Chris

1 0

Re: Why Jodi Hoffman must be called a 'Dumb Cunt' and told to 'Go Fuck Yourself' at all costs, by TruthMonger
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

TruthMonger wrote: > Thanks for replying to my email. It's the first one I ever got. > Everyone else just ignores me. Go figure... Theory #1 TruthMonger's true identity is the ventriloquist dummy from 'Soap'. Theory #2 Those strange sounds you hear when lying quietly in bed at night? They are the sound of people slapping their foreheads when they realize they are arguing with a dummy. (;>} A. Dummy II

1 0

Funding Cypherpunks Action Projects
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

I have worked out a plan whereby we can auction off the role of Cypherpunks Chief Spokesperson in order to fund CAP's. The idea for a Spokesperson pyramid scheme came to me after realizing that the list has not only a variety of individuals competing as the chief list 'Fed baiters', but also quite a number of people who enjoy 'Christian baiting', as well: TruthMonger, playing with his private parts, wrote: > Why does it not come as a surprise that this Dumb Cunt Nazi Christian > Bitch (TM) is hiding behind 'the children,' hoping that it will prevent > her from being a target of reprisal for the bullshit she is flinging > at others? > Why doesn't someone shoot this Dumb Cunt Nazi Christian Bitch? > If it saves the life of just one child... Eric Cordian spit out: > "Puritanism" might be defined as the fear that someone, somewhere, is > having a porn-induced orgasm. Stable people tend to worry about their > own orgasms, and not their neighbors. Perhaps if you had a few > orgasms yourself, you might lose interest in the orgasms of others. > [Nonsense Deleted] > Please bite my enormous throbbing love sausage with an ice cube in your > mouth. Jesus Christ wrote: > If you will check the Biblical Archives, I think you will find > that Peter never really fooled anyone, either. > {Speaking of which, do you also plan to censor the parts of the > Bible which quote my use of the word, "cock?"} There is no telling how much money we could raise by appealing to the macho male egos on the list who lock horns in CypherPissing cock-size wars, if we were to take bids on the honor of being the Cypherpunks' authorized 'Fed-baiter' or 'Christian-pisser', etc. Given the wide variety of individuals, groups, organizations, corporations, government agencies, etc., which have been the target of vicious attacks on this list, there is no end of the number of CypherPisser Ambassadorships we could invent to fill the Cypherpunks Action Projects coffers. Cypherpunks Chief MLM Spokesman

1 0

Re: www.cypherpunks.to
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Lucky Green wrote: > > What happened to www.cypherpunks.to? It appears to have disappeared. > > The server works fine and I can reach it from the US. I tried www.cypherpunks.to and couldn't get connected. I dropped the www and got sent to the www site. And the root password there is...

2 1

No Subject
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Igor Chudov @ home spoke: > > This Jodi Hoffman is most likely laughing at you all > after baiting you so successfully. > > I refuse to believe that she could have been so dumb to write > what she wrote, seriously. Believe it, Igor. There's a large number of people in the country who believe as she does, though perhaps not too many of them have the chutzpah to post such opinions to the fight-censorship list (where it could certainly be interpreted as a troll). Let's face it, there're a lot of people in the US who'd be happier if they were governed like China or Singapore; they want a stern authoritarian voice keeping society 'decent' and the homosexuals and other 'perverts' under control and out of sight, regulating what you can read and watch on TV, and what gets taught in schools, regulating what you can smoke and drink and sniff, and indoctrinating children into and enforcing the rules of the locally preferred religion. While they may pay lip service to it, they care little for the first amendment (except as it assures //them// the right to express //their// views or practice //their// religion). Sure, they'll wave the flag and mouth the words 'Constitution' and 'Bill of Rights', but their solution to every disagreement is 'put them in jail' or 'pass another law'. Frondeur -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNF9fllqnO6WRZ1UEEQKiSgCfQpuXZmx3Ry+GHKE83zzR3do11sUAoKzT ldtqH9pCnLO9QRrAoGaEfPGj =LOUx -----END PGP SIGNATURE----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGP for Personal Privacy 5.0 mQGiBDQn15YRBADp/iepGjB1hBoGgkKI+g4kHRtBQfpeR9BfwQP3E/GA+82SnLk+ BVExZEXaqgqq4cu3j89auJd+rSi++PpAuV03DpLfdTCdLQDrExEd63w0BYeM4g7L B7TA4LfSHgAuKwwtNPkgCfj7eWE34XOWTIbxnkQqMJyDLjzOUm/8LVHADQCg/8uo JZ1FmULWIhscEE1upL61+9kD/0zFqguqDrey8XHxRJeYom/UpEVV4gCJwkYrrew8 SKjtrUEHVA7la2TntCdXSQR5IrF5AWiamChxbCWdZE1F5bLl7xQgGrEJNNDk23Py L8ihmOYZk03rKYlaeUCxADKlI9hcWlGpsJnF6XRqjMltwfEe9S+zrsBRFQw3A7WR 4xwXA/9MiD+r0+ClUzJ1fC9dMJNDQQZQYdS0aiuh463cT3GI/CHJ34UD9ptmBLtQ ZEn0O0vK8eWSkw7vmrbqUekxgpl+B7tytuDKWHPUUgryblC0s986YSpnyeGZ0nt9 anzqKDqMOP3e1YVf8qJpZRPgzKl1KSncCGZ7CdVGgVxdl125vbQcRnJvbmRldXIg PGZyb25kZXVyQGRldi5udWxsPokASwQQEQIACwUCNCfXlgQLAwECAAoJEFqnO6WR Z1UE0rMAnRl8SRsYyH+IXH4yB3CzeF91V8J7AJ9Pk6oR9kFKbyUZyDIpbLkVC62F bbkCDQQ0J9eWEAgA9kJXtwh/CBdyorrWqULzBej5UxE5T7bxbrlLOCDaAadWoxTp j0BV89AHxstDqZSt90xkhkn4DIO9ZekX1KHTUPj1WV/cdlJPPT2N286Z4VeSWc39 uK50T8X8dryDxUcwYc58yWb/Ffm7/ZFexwGq01uejaClcjrUGvC/RgBYK+X0iP1Y TknbzSC0neSRBzZrM2w4DUUdD3yIsxx8Wy2O9vPJI8BD8KVbGI2Ou1WMuF040zT9 fBdXQ6MdGGzeMyEstSr/POGxKUAYEY18hKcKctaGxAMZyAcpesqVDNmWn6vQClCb AkbTCD1mpF1Bn5x8vYlLIhkmuquiXsNV6TILOwACAgf/fc9Mli0WztsQDfF/Itxp IiQzM5mvFq00BwHGvoKTdU+c8FWz3ZS0yzqpIwPp4wEvMLEC6xfTrGJzOxtdH4wO MHjHPVrykbc/6HkF9L10soea6Lc6/Ar93yIC+IpPmkcchPxKkYN+VEWGv97otWpS QwMHtMImUaPJ69jtn/oBtKjc9SlIy5ib5eIhchp1vEC75P4EwlPgOWXsGZA9IR63 0W8im1gNv8W9Egd1RCPFEt/UG7mpAjg7/SekUsOKksRWuC5MOEH1fSvVBIYjoMxG EYNMF632rxmhkC8bPKUeIuhpXJzHaqaE8yFA4YKw0K2TuQ/mHZ1L4KqPWH52h4Sc OokAPwMFGDQn15ZapzulkWdVBBECzMYAnA+Lv3zZm8Ptc7nPB2yz2FVFsL2JAJ4w v64l2UxSDvLRRZDDZY3B2LhJTw== =/z57 -----END PGP PUBLIC KEY BLOCK-----

1 0

Jodi Hoffman: Homophobe!!!!!!!!
by Ross Wright 17 Dec '03

17 Dec '03

From: http://199.227.69.135/ramp/aletter.html You might wish to add that most "homosexual" suicides are probably normal kids who have been seduced into an abnormal lifestyle encouraged by our schools and culture; or at the very least, they were probably suffering under the weight of excessive sexual harassment, in the form of our current crop of pathological sex-education programs. =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://ross.adnetsol.com Voice: (408) 259-2795

6 6

[ON TOPIC] Re: Why porn must be stopped at all costs, by Jodi Hoffman
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Paul Spirito wrote: > >Alexander Tyler wrote: > >> "A democracy cannot exist as a permanent form of government. It can only > >> exist until a majority of voters discover that they can vote themselves > >> largess out of the public treasury." > This assumes there is a "majority of voters". Read James Madison, & kiss a > multiculturalist today. > Now can we get back to denouncing Jewish Nazis? Sorry, that's off-topic. You _can_, however, discuss 'Remailer Hating Nazis'...

1 0

PGP 5.0: Keyservers
by lcs Mixmaster Remailer 17 Dec '03

17 Dec '03

Out of curiosity, what protection is there for PGP 5.x users submitting keys to the keyservers? Would it not be trivial for somebody to see what dialup SLIP link a key is coming from and tie that key to the person submitting it? That isn't a problem for personal keys, but it is a big problem for psuedonyms. Is there some kind of mechanism in place for submitting such keys via anonymous remailers? This might already have been covered by other Cypherpunks or the PGP folks. ParanoiaMonger

2 1

Re: Terrorism is a NON-THREAT (fwd)
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

snow wrote: > Part of the problem is that people _assume_ that legislation fixes > problems. It doesn't. Laws just give society permission to punish the > offender. Prosecutor: "You should find this nanny guilty of murder because young people like to party." Jury: "Duuhhh...OK!" What I find ironically hilarious, offensive and sad, is that there are still so many new laws being passed, in spite of the fact that they are no longer really needed. Courtrooms now pretty much just serve as an arena for engaging in the age-old sport of public stoning. Whoever does the best job of finger pointing, while working the crowd into a frenzy, wins. Tim McVeigh was Dead Meat (TM) the minute the judge ruled that fingers in the courtroom could only be pointed at Terrible Timmy. I guess I'm an old fart...I remember when $15 million could buy you a decent attorney. I don't own any guns, so I guess when the Feds kick my door in, I'll just point at the dog, and hope they go for my clever ruse. Hell, I'm even willing to testify... Not-Me!

1 0

Cypherpunks Physical Meetings...The Rest of the Story
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

>From News of the CypherPunks: * In March, a 36-year-old man choked to death on a 6-inch tropical fish he had popped into his mouth while showing off for friends in Bayou Vista, La. And in April, a 12-year-old boy was electrocuted in East Palo Alto, Calif., after he climbed a high-voltage transmission tower in the rain, dared his three companions to join him, and then accidentally touched a wire. And in July, a 22-year- old man, described by his grandmother as "smart in school," died in a bungee-cord accident on a railroad trestle in Fairfax County, Va. (Said a police spokesman: "The length of the cord that he had assembled was greater than the distance between the trestle and the ground.")

1 0

Re: Why porn must be stopped at all costs, by Jodi Hoffman
by Abstruse 17 Dec '03

17 Dec '03

> Someone on this list, I forget who, has made numerous attempts at > convincing us that pornography 'does no harm' to children. It is > exactly at this point that I must draw a line. Studies have shown that > an event which lasts even so much as three-tenths of a second, within > five to ten minutes has produced a structural change in the brain. > Exposure to porn causes actual brain damage, especially in a child. let me guess . . . scientology? it sounds to me as if you just despise porn so much that you're seeing red, and hence . . . not seeing the facts straight (or believing whatever you [want to] hear).

1 0

FREE
by test.test.com＠mail.txcc.net 17 Dec '03

17 Dec '03

This message is being brought to you by EMAIL PLATINUM software. If you would like more information about this software or any of our other HOT programs ABSOLTELY FREE call our FAX ON DEMAND number at 213-960-7822. %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% "THE F.R.E.E. ENTERPRISE CLUB" A PRIVATE INTERNATIONAL "MEMBERS ONLY CLUB" "GIVES YOU--INCOME & BENEFITS" INSURANCE SERVICE:HEALTH,GROUP,TERM LIFE,DENTAL,------FOR FREE DISABILITY INCOME,HOME OWNERS--------FOR FREE RENTERS,MEDICAL,AUTO,BOAT,& MORE-----FOR FREE TELECOMMUNICATION,COMPUTERS,EDUCATION,LEGAL,--------FOR FREE "THE S.W.I.F.T. CLUB" (FINANCIAL,--PRIVATE,--PROTECTION,--INCOME0 ) GIVES YOU AN OFFSHORE TRUST, BANK, ACCOUNT WITH A "GUARNTEED" VISA CARD & HUNDREDS OF DOLLARS $$$ INCOME IN YOUR BANK ACCOUNT. $ MAKING MONEY $ SAVING MONEY $$ ASSET PROTECTION $ " THAT'S OUR BUSINESS" CALL THIS TOLL FREE # 1-800-636-6773 EXT.4708 WORLD-WIDE MARKETING ALLIANCE,INC REMOVAL INSTRUCTIONS We practice responsible Direct Email Marketing. Your email address was obtained from sources indicating your desire to receive income opportunities. If you wish not to receive any further emails please type remove in the subject field and hit reply. Just wanted to let you know.

1 0

Financial Cryptography '98 Final Call for Papers
by Ray Hirschfeld 17 Dec '03

17 Dec '03

Financial Cryptography '98 Second International Conference February 23-26, 1998, Anguilla, BWI FINAL CALL FOR PAPERS General Information: Financial Cryptography '98 (FC98) is a conference on the security of digital financial transactions. Meetings alternate between the island of Anguilla in the British West Indies and other locations. This second meeting will be held in Anguilla on February 23-26, 1998. FC98 aims to bring together persons involved in both the financial and data security fields to foster cooperation and exchange of ideas. Original papers are solicited on all aspects of financial data security and digital commerce in general, including Anonymous Payments Fungibility Authentication Home Banking Communication Security Identification Conditional Access Implementations Copyright Protection Loss Tolerance Credit/Debit Cards Loyalty Mechanisms Currency Exchange Legal Aspects Digital Cash Micropayments Digital Receipts Network Payments Digital Signatures Privacy Issues Economic Implications Regulatory Issues Electronic Funds Transfer Smart Cards Electronic Purses Standards Electronic Voting Tamper Resistance Electronic Wallets Transferability Instructions for Authors: Send a cover letter and 12 copies of an extended abstract to be received by November 17, 1997 (or postmarked by November 7, 1997 and sent via airmail) to the Program Chair at the address given below. The extended abstract (a short draft of the full paper, typically 10 pages in length) should start with the title, the names of the authors, and an abstract followed by a succinct statement appropriate for a non-specialist reader specifying the subject addressed, its background, the main achievements, and their significance to financial data security. Submissions are limited to 15 single-spaced pages of 12pt type. Notification of acceptance or rejection will be sent to authors no later than January 12, 1998. Authors of accepted papers must guarantee that their paper will be presented at the conference. Proceedings: Proceedings of the conference will be published by Springer Verlag in their Lecture Notes in Computer Science (LNCS) series. Preproceedings will be available at the conference, but final versions will not be due until afterwards, giving authors the opportunity to revise their papers based on presentations and discussions at the meeting. Instructions and deadlines for submission of final papers will be sent later to authors of accepted papers. Rump Session: In addition to the regular conference program, a rump session will be held to provide an opportunity for less formal presentations. Although the rump session will be organized during the conference itself, any advance proposals may be sent to the Program Co-Chair at the email address given below. Rump session contributions will not appear in the conference proceedings. Stipends: A very limited number of stipends may be available to those unable to obtain funding to attend the conference. Students whose papers are accepted and who will present the paper themselves are encouraged to apply if such assistance is needed. Requests for stipends should be addressed to one of the General Chairs. Registration: Information about conference registration and on travel, hotels, and Anguilla itself will follow in a separate general announcement. There are special reduced registration rates for full-time academics and students. Further information about registration is available online via the URL listed below. Workshop: A workshop, intended for anyone with commercial software development experience who wants hands-on familiarity with the issues and technology of financial cryptography, is planned in conjunction with FC98, to be held during the week following the conference. Further information about the workshop is available online via the URL listed below. For information about workshop registration, please contact one of the General Chairs. Special Attraction: On Thursday, February 26, 1998, there will be a total eclipse of the sun. The narrow zone of 100% totality will pass just south of Anguilla, and there should be an excellent view of the eclipse from the conference site. Send Submissions to: Rafael Hirschfeld FC98 Program Chair CWI Kruislaan 413 1098 SJ Amsterdam The Netherlands email: ray(a)cwi.nl phone: +31 20 592 4169 fax: +31 20 592 4199 Send Rump Session Contributions to: Matthew Franklin FC98 Program Co-Chair email: franklin(a)research.att.com Program Committee: Matt Blaze, AT&T Laboratories--Research, Florham Park, NJ, USA Antoon Bosselaers, Katholieke Universiteit Leuven, Leuven, Belgium Yves Carlier, Bank for International Settlements, Basel, Switzerland Walter Effross, Washington College of Law, American U., Washington DC, USA Matthew Franklin, AT&T Laboratories--Research, Florham Park, NJ, USA Michael Froomkin, U. Miami School of Law, Coral Gables, FL, USA Rafael Hirschfeld, CWI, Amsterdam, The Netherlands Alain Mayer, Bell Laboratories/Lucent Technologies, Murray Hill, NJ, USA Moni Naor, Weizmann Institute of Science, Rehovot, Israel Frank Trotter, Mark Twain Ecash/Mercantile Bank, St. Louis, MO, USA Doug Tygar, Carnegie Mellon University, Pittsburgh, PA, USA Moti Yung, CertCo LLC (formerly: Bankers Trust E-Commerce), New York, NY, USA General Chairs: Robert Hettinga, Shipwright, Boston, MA, USA email: rah(a)shipwright.com Vincent Cate, Offshore Information Services, Anguilla, BWI email: vince(a)offshore.com.ai Exhibits and Sponsorship Manager: Julie Rackliffe, Boston, MA, USA email: julie(a)sneaker.net Workshop Leader: Ian Goldberg, Berkeley, CA, USA email: iang(a)cs.berkeley.edu Financial Cryptography '98 is held in cooperation with the International Association for Cryptologic Research. FC98 is sponsored by: RSA Data Security Inc. <http://www.rsa.com> C2NET, Inc. <http://www.c2.net> Hansa Bank & Trust Company Limited, Anguilla <http://www.hansa.net/> Offshore Information Services <http://www.offshore.com.ai/> e$ <http://www.shipwright.com> Those interested in becoming a sponsor of FC98 or in purchasing exhibit space, please contact the Exhibits and Sponsorship Manager. A copy of this call for papers as well as other information about the conference will be available at URL http://www.cwi.nl/conferences/FC98.

1 0

Re:
by semprini＠theschool.com 17 Dec '03

17 Dec '03

> > > Someone on this list, I forget who, has made numerous attempts at > > convincing us that pornography 'does no harm' to children. It is > > exactly at this point that I must draw a line. Studies have shown that > > an event which lasts even so much as three-tenths of a second, within > > five to ten minutes has produced a structural change in the brain. > > Exposure to porn causes actual brain damage, especially in a child. > > let me guess . . . scientology? it sounds to me as if you just despise > porn so much that you're seeing red, and hence . . . not seeing the > facts straight (or believing whatever you [want to] hear). Let me set some facts straight. The idea in the paragraph above from Jodi Hoffman is quite contrary to the ideas held by Scientologists. The idea in the paragraph above has to do with the ideas held by the secular humanists and their attempts to explain human behaviour as having nothing to do with a will, but as just chemical reactions. Make sure you know exactly what ideas are held by a particular group before you attempt to denounce them. As Mark Twain once said, "First get your facts straight; then you can distort them." --Dylan FWIW, I heartily agree that Jodi probably "despises porn so much she's seeing red", which she has every right to do. However! She's quoting studies that are crocks, so her entire agrument is fallacious, as TruthMonger so eloquently pointed out. :)

1 0

Pet Bog Crypto Ban
by John Young 17 Dec '03

17 Dec '03

As a strategic bank shot for banning domestic use of encryption the US FBI and Fish and Wildlife Service have declared the pet Bog Snatch Algorithm a terrorist threat: http://jya.com/fws110497.txt (134K) B. Overutilization for Commercial, Recreational, Scientific, or Educational Purposes The bog turtle is a target for pet collectors due to its rarity in the wild, distinctive coloration, and small size. Take (primarily illegal) both for the national and international commercial pet trade industry has occurred for many years. Collecting is a significant factor in the species decline and is an ongoing threat to its continued existence in the wild (Anon. 1991; Earley 1993; David Flemming, U.S. Fish and Wildlife Service, in litt. 1991; Herman 1990; Klemens in press; Stearns et al. 1990; Tryon 1990; Tryon and Herman 1990). During the last 5 to 10 years, an increasing number of bog turtles have been advertised for sale, and prices have increased substantially. The increase in price most likely reflects the increase in demand for the turtles; the increase in demand increases the threats to the wild populations (Tryon and Herman 1990). Atlanta Zoo personnel reported that from 1989 to early 1991, over 1000 bog turtles were exported to Japan. These figures differ significantly from CITES data and represent a significant amount of unreported illegal trade (Anon. 1991). The World Wildlife Fund recently listed bog turtles as among the world's top 10 ``most wanted'' endangered species (Earley 1993). According to Alan Salzburg, President of the American Turtle and Tortoise Society, the bog turtle is considered the most prized turtle in the United States, and when bog turtle locations become publicly known, they are exploited by collectors within 1 year (Laura Hood, Defenders of Wildlife, in litt. 1997). Due to the threats facing bog turtle populations, the Society for the Study of Amphibians and Reptiles adopted a resolution calling for the prohibition of collection from wild populations (Stearns et al. 1990). Due to the small size of existing populations, and the low reproductive and recruitment potential of this species, the removal of even a few breeding adults can do irrevocable damage to a population (Tryon 1990). Collecting has been a factor in the reduction or extirpation of several bog turtle populations in Delaware (Anon. 1991), Maryland (Anon. 1991; Smith, in litt. 1994), Massachusetts (Anon. 1991), New Jersey (Farrell and Zappalorti 1989; Zappalorti, pers. comm. 1994; Zappalorti, in litt. 1997), New York (Breisch, in litt. 1993; Breisch et al., in litt. 1994; Collins 1990; Behler, in litt. 1997), and Pennsylvania (Ralph Pisapia, U.S. Fish and Wildlife Service, in litt. 1992; Zappalorti, in litt. 1997). Many sites in these States have suitable habitat, but have much-reduced bog turtle populations, probably due to collecting. Throughout the bog turtle's entire range, States regulate take through classification of the species as endangered (in Connecticut, Delaware, Massachusetts, New Jersey, New York, Pennsylvania, and Virginia) or threatened (in Georgia, Maryland, North Carolina, South Carolina and Tennessee), yet trade continues. Illegal trade is difficult to detect due to the questionable origin of turtles being offered for sale. Bog turtles are often ``laundered'' through States which either do not have native populations (e.g., West Virginia, Florida, California), or through States which have inadequate protection of their own bog turtle populations (Charles Bepler, U.S. Fish and Wildlife Service, in litt. 1993; Breisch, in litt. 1993; Michael Klemens, in litt. 1990). For example, in recent years dealers have claimed West Virginia as the State of origin for bog turtles; however, there is no evidence to support the contention that the bog turtle occurs in that State (Dennis Herman, Project Bog Turtle Coordinator, in litt. 1997; Tom Thorp, North Carolina Herpetological Society, in litt. 1997). Hatchling and juvenile turtles marketed as ``captive-born'' are usually offspring from gravid adult females illegally brought into captivity and held until they deposit eggs. The eggs are then hatched in captivity, and the captive-born (but not captive-bred) offspring are then marketed or retained (Bepler, in litt. 1993). A few specific instances of illegal bog turtle collecting and trade are reported below: (1) An undercover officer purchased eight bog turtles from a person who had collected them near Lancaster, Pennsylvania. Also, two additional bog turtles were recovered from persons who had gotten them from friends allegedly in the New York area (Bepler, in litt. 1993); (2) An individual from New Jersey was arrested for bringing bog turtles from New Jersey to Florida and selling them as captive-born. It is suspected that he collected about six turtles per year over a period of several years (Bepler, in litt. 1993); (3) A reliable source in New York reported that over 2000 wild- caught bog turtles were shipped to Japan in a 2-year period (Murdock, in litt. 1990); (4) Researchers found several turtle traps and a much-diminished bog turtle population at an important bog turtle site in Pennsylvania (Pisapia, in litt. 1992); (5) In 1993, a New Jersey resident purchased 47 bog turtles in Florida, and since 1984 had also bought 20 additional bog turtles. This individual supposedly has an active breeding program for bog turtles (Terry Tarr, U.S. Fish and Wildlife Service, in litt. 1993); (6) When confronted in a New York wetland, an individual claiming to be a birdwatcher revealed the contents of the cloth bag he was carrying--a bog turtle and spotted turtle (Paul Novak, New York Natural Heritage Program, in litt. 1990); (7) A reliable source reported seeing approximately 60 bog turtles at the Ohio residence of a person who frequents reptile shows. Based on the physical appearance of the bog turtles, they were not captive-bred (Scott Smith, Maryland Department of Natural Resources, in litt. 1996); (8) Bog turtles have been available at the major Herpetological Expo in Orlando, Florida for the last 2 years (Herman, in litt. 1997; Thorp, in litt. 1997); and (9) Bog turtles were observed in several Florida dealerships in 1996, although they have not been openly advertised for sale (Herman, in litt. 1997). The general consensus among bog turtle researchers, nongame biologists, and law enforcement officials is that illegal collecting is occurring at a much greater rate than detected or reported (Anon. 1991; Breisch, in litt. 1993; Flemming, in litt. 1991). Bog turtles are already extremely low in numbers throughout much of their range, and any additional take could eliminate marginal populations and hamper survival and recovery efforts. Protecting existing sites for bog turtles can pose a threat when these specific sites are revealed and publicized. In addition to the threat of collection for the pet trade industry, collection of bog turtles for exhibition at nature centers is also a threat (Anon. 1991).

1 0

Porn gave me brain damage!!
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

I have been reading this list for some time now but have only posted a few messages, you might recall them, they were about the government using perceived threats to convince the public that they needed legislation to protect them from harmful elements on the Internet. I am not posting now about any sort of government conspiracy or mind control tactics used to convince people they need to give up rights in order to be safe, I am posting to tell you all how very wrong I was. I have just come from the neurologist where I was diagnosed with dementia pornographia, a syndrome caused by exposure to pornography. I have been afflicted with an obsession with pornography since I first realized I was attracted to women. I remember looking at them and imagining them with no clothes on. I know now that this is when the damage was begun, and there is nothing I can do now to reverse it. My first taste of pornography was in junior high school. We had a sex ed class and the textbook was full of crudely drawn genetalia. I looked at these pictures frequently while studying, little did I know what was being done to me, the pictures were causing chemical changes in my brain, stimulating synapses and causing neurons to fire. At first I was like any normal kid, very loving and close to my family. As I got drawn deeper and deeper into pornography I changed, first I started hanging around with other boys interested in female genetalia. Then I started searching through my parents belongings and stealing whatever I could to support my habits. Newspapers, catalogs, books, national geographic, anything with pictures of women in it would do. My parents didn't understand what I was going through they just assumed that I was going through a phase, they didn't know that my little "phase" caused new hormones to be released into my brain changing it for good. Through most of my high school and college years I was a dedicated porn user. I always surrounded myself with people that thought porn was "cool" or that it was "no big deal". I became increasingly estranged from my family and even went so far as to move away from home for my freshman year in college. I was 18 now and could legally buy dangerous pornographic material. Once I was living away from home I started experimenting with pre-marital sex. At first I knew it was wrong, but all my friends were doing it so I did it to fit in. Soon I became to desire it, even need it. If I went for a while without it I would do just about anything to "get laid". When A friend of mine introduced me to the Internet all my prayers had been answered, all the porn I could ever need and people werejust giving it away. I was chipping away at my brain bit by bit, every site, every newsgroup, every picture, every chatroom, was drawing me deeper into the world of porn. Then I read Jodi Hoffmam's post and I knew that I needed help. I hope that this can help people, I am to far gone to be helped now. I hope people can learn from the mistakes I made. I hope something can be done to stop the rampant proliferation of porn from hurting other innocent children, too young to know better, but having lost their innocence and having experienced more than any child should. It is the children that are losing in the war against pornography. --Bucky

1 0

Re: Why porn must be stopped at all costs.....
by mark＠unicorn.com 17 Dec '03

17 Dec '03

Jodi Hoffman <jlhoffm(a)ibm.net> wrote: >Try as I might, I cannot forget standing on the steps of the Supreme >Court building with my husband and 10 year old daughter in the freezing >drizzle. I'm sure that your daughter can't forget such an obvious example of child abuse either. Perhaps someone should inform the BATF? >Don't >you realize that YOU are a major reason for the downward spiral of >society? Don't tell them or they'll all want one... >Studies have shown that >an event which lasts even so much as three-tenths of a second, within >five to ten minutes has produced a structural change in the brain. Studies have shown that anti-porn rhetoric kills babies and causes cancer in lab rats. Which studies? The ones I just made up... of course your comment isn't a total lie, it's just a blatant and, frankly, inept attempt to twist reality to support your cause. The human brain is a neural network; any data entering into it changes its structure. Which leads to the inevitable conclusion that: Exposure to anti-porn rhetoric causes actual brain damage, especially in a child. >So, keep protecting your porn-induced orgasms. That's exactly what >happened with the Hitler youth, etc... I think you'll find that the Hitler Youth were too busy burning 'pornography' to read it, though I guess burning books may have given them orgasms. Many people seem to have the hots for it, after all. >RULE FOR REVOLUTION #1: CORRUPT THE NATION'S YOUTH [Rest deleted; I'm glad to see that the revolution is proceeding as planned. I'll mention you at the next Illuminati Grand Council.] >RULE FOR REVOLUTION #2: CONTROL THE MASS MEDIA Ah, this is where I come in; I have, sadly, been neglecting my cypherpunk duties lately because I've been spending too much time on film-making. You see, I have this dream; I want to make a movie of the entire Bible, and not the old Charlton Heston version, but totally unexpurgated, keeping entirely to the text, including all those embarassing bits about Lot's daughters screwing their father while he slept in order to have his children ('No, no your honor, it wasn't me, they did it to me in my sleep'), men who are hung like stallions, and babies having their brains bashed out of their skulls. Why? Because I want to see the religious censors squirm... I do so enjoy their anti-porn and anti-violence rants when they're pushing one of the most violent and pornographic novels ever written. >Jodi Hoffman R.A.M.P. http://www.gocin.com/ramp >Victimization of Children/Research & Education Council of America Excuse me? You're part of the 'Victimization of Children Council'? You mean child victimizers have their own lobby group these days? Boy, ain't America wonderful? Mark

1 0

Sen. Judd Gregg speaks on cyberporn
by Declan McCullagh 17 Dec '03

17 Dec '03

Sen. Judd Gregg (R-NH) is the chairman of the Senate appropriations committee's subcommittee that funds the FBI. Today he spoke at Digital/AltaVista's "Summit on Internet Content Filtering & Third-Party Rating." He said that he "disagreed with the Supreme Court" ruling that struck down the CDA as unconstitutional. He praised the FCC and the V-chip. He also said: "In a recent study, the Carnegie Mellon Institute found 917,410 sexually explicit pictures, short stories, and film clips online within an 18-month period." Uh-huh. -Declan

5 4

Profiling/pc security at Ben-Gurion Airport, Tel Aviv, Israel
by kraiwut＠samart.co.th 17 Dec '03

17 Dec '03

Profiling/personal computer security at Ben Gurion Airport, Tel Aviv I just had a rather unholy experience in Israel. Maybe someone with expertise can email me a few suggestions with regards to securing a PC at start up. On Nov. 2nd I arrived three hours early to Ben Gurion Airport for my flight to Bangkok(via Amman, Jordan). While standing in line before the check-in counters I listened to Shin Bet representatives interrogating passengers. When my turn came the friendly skies turned dark. Apparently my responses to the standardized questions became an unwelcome indictment. I believe a few things contributed to my being selected: 1) jobless but carrying a generous roll of C notes and a stack of trav. checks 2) purchased a one-way the day before from an Arab travel agent(with credit card, not cash) 3) declined an Israeli stamp in my passport(*red flag*) 4) numerous stamps from Arab countries; travelled overland from Sinai 5) I rented a car from an Arab agency located in East Jerusalem These characteristics qualified me for a trip to the back room where they opened my bag and discovered a computer. "Why didn't you tell me you had a computer?" the Shin Bet trainee demanded in a somewhat agitated tone. "Because you didn't ask", I replied. A few moments later someone emerged from yet another back room and asked me something stupid about the computer's battery. I removed the battery as requested. He then asked to see the computer ostensibly to send it through a machine to determine if it was actually a well-disguised bomb. That was his pretense as the computer disappeared for more than 45 minutes. About 5 minutes after he left with the computer someone else walked into the room and gave me the floppy that I always leave in that drive. I assume that this means that they began working on the machine as soon as they left the room with it. Later someone else from another building came to look at the computer so I guess this means that they have a few guys who swing between the four departure terminals checking on progress or doing whatever. When the guy returned my computer there was a half inch crack on the side of my Toshiba that hadn't been there when he left with it. Perhaps they took a hammer and chisel to my hardware. I started it up and found that the Windows 95 password was compromised(no flames, please). I know that you can by-pass the Win95 password by going to the DOS mode, then tweaking something. However, I don't think that was done as the network configuration was altered and some sort of recent Win95 utility was installed( and it wasn't mine). I say recent because I have a newer version Win95 on my desktop so the slight differences are easily apparent to me. The shut down option has a different("shut down and allow user to log on") something or other than was there before. Now the password feature is fucked and the battery management feature isn't working either. I have PGP5.0 installed and a few other easy-to-use crypto and stego programs but nothing was said about those. I have three documents encrypted with PGP but I seriously doubt that they were found. They opened four documents in WordPerfect but nothing in those documents is in the least bit interesting. They easily could have copied the entire C drive and given the machine back to me. Or they could snatch an identity or two and use them for their own corrupt pursuits. What can I do to make the computer fucking impenetrable at start up? --- to the point that they have to ask me for the password or nothing moves. The whole episode was unfucking believable and that wasn't all. I had a $50 bill stashed in a small space in my backpack. While in the terminal waiting to board I discovered it missing. One of the urchins who was protecting the Jewish state from terrorism burned me. The adapter for my Canon printer is missing as well. In short, the Israelis are unscrupulous bastards who deserve a suitcase nuke. I am convinced of this after having visited the tragedy known as the Occupied Territories--- but that is another matter. I wrote down most of the questions used for their profiling scheme. If anyone is interested I will send them if requested. If anyone is interested in creating a page dedicated to these profiling schemes(American, Israeli, anyone) I would be happy to contribute. send security suggestions to: hico(a)hotmail.com

4 3

Interpol on Computer Crime / Cryptography
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text To: Digital Commerce Society of Boston <dcsb(a)ai.mit.edu> From: oldbear(a)arctos.com (The Old Bear) Subject: Interpol on Computer Crime / Cryptography Date: Sun, 2 Nov 1997 14:50:39 -0500 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: oldbear(a)arctos.com (The Old Bear) Status: U --- Forwarded message follows --- Date: Fri, 31 Oct 1997 05:09:25 +-5-30 From: Rishab Aiyer Ghosh <rishab(a)dxm.org> Subject: Interpol on Computer Crime Telecom-Digest: Volume 17, Issue 299 Lines: 135 In the context of FBI Director Louis Freeh's statements on computer crime, here's the Interpol take. -rishab [from American Reporter, the Internet's only daily newspaper, www.american-reporter.com] EXCLUSIVE: INTERPOL'S TOP INTERNET CRIMEFIGHTER SPEAKS OUT Rishab Aiyer Ghosh American Reporter Correspondent New Delhi, India NEW DELHI -- The impact of the Internet on crime-fighting may not be as great as some hope, Interpol's top expert on networked computer crimes has told the American Reporter. Hiroaki Takizawa says old-fashioned methods of seeking evidence and gathering information may remain the staple of crimefighters for a long time to come. Takizawa talked to the American Reporter at the 66th annual General Assembly of the worldwide crime-fighting organization Interpol <http://www.interpol-pr.com> in New Delhi last week, where one of the key topics of the conference was the impact of the Internet on global crime and enforcement. In an interview, the top Interpol expert on Internet and computer crimes, Hiroaki Takizawa, said despite the serious problems being posed by the Internet to police everywhere, traditional, off-line evidence gathering and investigation will remain the primary tools of law enforcement. Takizawa admitted that strong cryptography and anonymous email make illicit transactions difficult to monitor or trace through the Internet. Interpol, he said, is concerned at the spread of cryptography, but does not advocate legislation banning it. "What we concentrate on is the implementation of legislation, rather than legislation itself," said Takizawa, when asked if he favored a crypto ban. "Police need human and financial resources" to investigate crime using the Internet, feels Takizawa, more than unenforceable legislative bans. Do police make use of intercepted messages much, on a global scale? "Yes, I think so, yeah," said Takizawa. However, "we don't, we haven't had many cases" that relied on undecipherable messages as evidence. "I don't think the Interpol plays an important role so far as [legislation on] cryptography is concerned," says Takizawa. The Interpol cannot make binding treaties affecting national law -- "it is not really a policy developing organization," he said. Instead, it makes resolutions "from the police point of view" -- and its members then go home to lobby with their governments. It does not intend to make any resolutions on cryptography, though. Instead "[Interpol] will focus on training and coordination" so that police forces around the world "can develop practical solutions." As for changing the law, "the OECD<http://www.oecd.org> has started discussion" on cryptography -- and has come to the conclusion <http://www.oecd.org/dsti/iccp/crypto_e.html> that crypto bans are not a good approach. Interpol finds that an increasing amount of its work involves the Net or computers in one way or another, and has set up a team to figure out where police -- and the Interpol -- can have an effective role. Interpol divides digital crime into three areas: computer crime, which includes piracy, data-theft and time-theft (computer break-ins); computer-related crime, which is mainly bank fraud -- "what was a crime earlier with paper, but is now done with a computer," as Takizawa says, and pornography. The third, most recent area that "everyone's talking about now," Takizawa said, is what Interpol calls "network crime": the use of the Internet for transactions that are already illegal -- child pornography -- or aid illegal activity -- often involving the drug trade, customs evasion and money laundering. Takizawa finds that of these network crimes, child pornography and the use of the Internet as an accessory to child sex abuse -- on-line advertisements for Asian "sex tours" targeted at Westerners, for example -- is the easiest to tackle. Stopping the distribution of pornography itself is harder, though, thanks to the Internet -- "normally [pornography] was checked at the airport and confiscated by customs, now you just download it by computer" -- so Interpol doesn't even try, he says. "Interception [is] impossible," said Takizawa bluntly. Instead, Interpol uses the easily searched structure of the Net to trace material back to its off-line origins. Police aided by Interpol's global network locate brochures for sex tourism on the Net much more easily than if they were in print, and follow up with off-line investigations and arrests, he said. The cross-jurisdictional nature of the Net -- and the fact that countries disagree on precisely what activities are criminal -- is less of a problem for child pornography than money-laundering. Takizawa describes a recent case involving Germany and Japan: "from Germany we received information [on child pornography found online] pointing to Japan. Through Interpol we [passed] it on to Japan," where authorities traced the originators and made arrests. And what about money laundering? Doesn't the prospect of untraceable, anonymous global electronic commerce on the Internet scare Interpol? "Well, my counter-question is, have there been so many cases of ... [monetary] transactions using [the] Internet?" asks Takizawa. Perhaps not -- yet. But once you have some form of the digital currency required for any large-scale electronic commerce, what will Interpol do about money laundering? "We don't know," he admits. When cyberpayments are common, Takizawa adds, "we cannot tell you what's going to happen. Everybody wants to know that. If you can predict it perhaps you [will] get the Nobel prize!" For an organization sometimes represented as a global police force -- which Interpol is not -- being a coordinating body for 178 national law enforcement agencies worldwide -- Takizawa's depiction of its Internet policy is surprisingly tame. His view well may stem from a basic understanding of the nature of crime, which doesn't occur on the Internet so much as pass through it. However much criminals use the Net, says Takizawa, police will always "need more evidence outside the network." ---------------- Rishab Aiyer Ghosh <rishab(a)dxm.org> is Editor of the New Delhi-based Indian Techonomist, a popular technology journal. For help on using this list (especially unsubscribing), send a message to "dcsb-request(a)ai.mit.edu" with one line of text: "help". --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/ Ask me about FC98 in Anguilla!: <http://www.fc98.ai/>

1 0

RE: S/MIME
by Ian Clysdale 17 Dec '03

17 Dec '03

I'm sorry, but I have to disagree on that one. S/MIME DOES use 40 bit RC2, by the standard, but the standard specifically states the weakness of those keys, and recommends using another implementation. The standard strongly recommends the use of triple-DES, and apparently the Communicator and Outlook S/MIME triple-DES now interoperates properly. Deming has also had a plugin which does triple-DES for quite a while. In addition, individual vendors are allowed to put in any other algorithms into an S/MIME implementation that they desire - for example, the default algorithm in Entrust's S/MIME implementation is CAST-128. The point that I'm trying to make here is that while PGP defines both algorithm and protocol, S/MIME just defines protocol. As long as you have two clients which share common algorithms, then you can use any algorithms that you like with S/MIME. ian ---------- From: Jonathan Wienke [SMTP:JonWienk@ix.netcom.com] Sent: Monday, November 03, 1997 9:34 PM To: Nobuki Nakatuji; cypherpunks(a)toad.com Subject: Re: S/MIME At 08:49 PM 11/2/97 PST, Nobuki Nakatuji wrote: >Is S/MIME secure than PGP ? No. S/MIME uses 40 bit keys, which are trivially breakable by paralell brute-force key search attacks. Jonathan Wienke

2 1

RE: S/MIME
by Ian Clysdale 17 Dec '03

17 Dec '03

This is not true. If you read the S/MIME specs it says one MUST implement the RC2/40 algorithm. A MUST in an RFC has a very definate purpose: If an aplication does not implement all MUST sections of the RFC then it is not compliant! To create an S/MIME compliant application one MUST implement RC2/40 and one MUST pay RSA to do so!! Umm.... If you read what I wrote, you will see that I said "S/MIME DOES implement 40 bit RC2, but it ALSO implements XXXXXXXX. Personally, I'd rather see even weak crypto getting world-wide deployment than seeing no crypto getting out because of stupid draconian export laws. However much you may dislike their "weak crypto", Netscape and Microsoft are getting more seats of crypto-compliant software out there than PGP ever has. And once the infrastructure is out there where everyone can use weak crypto, people will (hopefully) realize that it is insecure, and shift to stronger algorithms that ARE supported currently in domestic US/Canada versions, and which I'm sure someone outside of the States will have coming out in the near future, if they're not already there. Netscape, Microsoft, and RSA are letting thier greed get in the way of developing a message encryption protocol that provides strong crypto to ALL users. Either that, or Netscape, Microsoft, and RSA are being practical and doing something that will legally put SOME cryptography in the hands of everyone today. It's all in how you look at it. ian

2 1

RE: S/MIME
by Ian Clysdale 17 Dec '03

17 Dec '03

There is an old saying in the Security Field: "Poor Security is worse than no security at all". I doubt that you would find few if any that would agree with you that it is a good thing having the masses using weak crypto. At least the US members of the Open-PGP group are willing to sacrifice overseas sales in the effort to provide STRONG crypto to EVERYONE. It is the right thing to do. I am sorry to see that you do not uderstand this. Sorry, I'm going to continue to take a viewpoint that I suspect is rather unpopular in this list, and argue for the advantages of weak crypto in certain circumstances, when it is KNOWN to be weak. The phrase "Poor security is worse than no security" refers to the dangers in assuming that your communications are secure, even when they're not. If you know that your cryptography is weak, it can still sometimes be sufficient for your purposes. What weak cryptography does is protect from passive attacks, such as simple wire-tapping. While an RC2/40 message can be trivially broken in a matter of hours, it can't be broken in real-time. If EVERYONE used even RC2/40, then passive attacks would be foiled, because the <insert evil NSA/CSIS/etc here> just isn't going to bother breaking every single transmitted message. Now, of course, if you're doing something where you don't want your communications to be intercepted under any circumstances, then you want to be using something stronger than RC2/40. However, S/MIME doesn't prevent that at all. DES is a published standard, and I'm waiting for somebody outside of the USA to implement triple-DES with S/MIME. This will inter-operate with Outlook and Netscape clients inside the USA (theoretically). Including a minimum baseline of weak cryptography is NOT denying strong cryptography to everyone. Once the patent on RC2 expires (which is very soon) or if RSA gets dropped on their head and finally does the intelligent move of releasing it to the public domain, then S/MIME provides an expandable infrastructure for secure mail, with a huge user base already out there, and in a form much more spoonable to the unwashed masses. Ian

3 2

No Subject
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

Adam Back writes: > People copy commercial software all the time. I suspect only some > small fraction of personal use software is ever paid for. Companies > are less likely to do this Companies do it because the boss can instruct the underlings to do multi installs and then deny he did so. Doesn't work on pig-headed "Can I have that in writing" types (like me). > One idea which I did like was the open bidding for a product to be > developed, people interested in the feature or product pay how much it > is worth to them up front, developers bid to take the job on. After > it's done the software is freeware. Supporting ideas discussed before > on this topic are that first to complete gets paid, or lowest bidder > presents completion bond, and that there are independent aribitrators > checking quality. > There was someone who posted to the list that he was going to set this > up. He even purchased the domain name if I recall. What happened, > did anything come of it? Bounty Software Group (BOUNTY3-DOM) 818 West Sunnyside, Apt 3b. Chicago, IL 60640 US Domain Name: BOUNTY.ORG Administrative Contact: Petro, Christopher (CP588) petro(a)SUBA.COM 312.784.0099 Technical Contact, Zone Contact: Strasheim, Alex R. (AS55) alex(a)SUBA.COM (312) 929-8008 Billing Contact: Petro, Christopher (CP588) petro(a)SUBA.COM 312.784.0099 Record last updated on 23-Nov-96. Record created on 23-Nov-96. Database last updated on 4-Nov-97 05:29:24 EDT. Domain servers in listed order: SUBA01.SUBA.COM 198.87.202.2 BIRD.SUBA.COM 198.87.202.33

1 0

Re: Forging your return address.
by Toto 17 Dec '03

17 Dec '03

Sympatico Admin wrote: > Hi Larry, > > We have determined that you have be trying set your email program to > be anonymous; ie forging your return address. If you wish to be > anonymous then get a free email account with hotmail.com or rocketmail. Dan, The Sympatico Netscape software you provide has features that allow the user to choose not to give out their email address to those that they wish to keep it from, such as spammers, criminals and sex-shop operators. I have not been made aware of any Sympatico policy which requires your users to make themselves vulnerable to anyone and everyone who has connections to the InterNet. > Your forged reply-to addresses 'fred(a)dev.null' get rejected by our > email system and sit in our mail queue. My chosen reply-to addresses at 'dev.null' are a traditional UNIX method of directing files and email to /dev/null, which is the equivalent of the Trash Bin on a Mac. You seem to have set up your UNIX system to emulate a Win95 Recycle Bin, in that it assumes that the user doesn't know what he or she is doing, so saves deleted items. Dev.null addresses are designed to get rejected by the email system, so it seems rather useless to keep them in your mail queue. > Also please do not set your > email program to relay through someone else's server in another domain as > there have been complaints. We do not allow this to be done from anyone > outside our domain. You will have to explain to me what exactly you are talking about here, as it is unclear to me what you are referring to. Please forward me copies of the complaints. > Please note: this note is being sent to our security dept. as we deem this type > of activity to be mis-use of the mail system and as such you could loose > your access privleges. Since this seems to be of such serious concern to you, I would certainly appreciate it if you could explain to me in greater detail exactly what it is about my use of my account that Sympatico has a policy problem with, and why. > If you have any question or concerns then please reply to this note! I notice that your reply to address, 'Sympatico Admin <deckd>', is not a valid InterNet email address. Is this an internal system address? Toto

3 2

Senate Commerce cmte approves tax freedom bill 14-5
by Declan McCullagh 17 Dec '03

17 Dec '03

[Right now I'm over at the Digital/Altavista summit to discuss rating systems in search engines so I missed the vote. (Barry Steinhardt from the ACLU just finished speaking. Sen. Judd Gregg, a CDA fan, spoke this morning.) This bill limits local and state governments' ability to tax the Net. --Declan] ---- (forwarded to me by a House staffer) >The full Senate Commerce Committee voted today 14-5 to approve an amended >version of the Internet Tax Freedom Act. Here's how members voted: > >14 Yes: McCain, Stevens, Burns, Snowe, Ashcroft, Frist, Abraham, Brownback, >Hollings, Inouye, Rockefeller, Kerry, Breaux, Wyden >5 No: Gorton, Hutchinson, Ford, Bryan, Dorgan >1 Did not vote: Lott

2 1

mixmaster...
by lars.hornell＠ornskoldsvik.mail.telia.com 17 Dec '03

17 Dec '03

Is mixmaster not avalible to download or what??? If it IS avalible to download. Where can I download it then???

1 0

Re: S/MIME
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

William H. Geiger III wrote: > >>There is an old saying in the Security Field: "Poor Security is worse > >>than no security at all". > at 11:24 AM, Ian Clysdale <iancly(a)entrust.com> said: > > > Sorry, I'm going to continue to take a viewpoint that I suspect is > >rather unpopular in this list, and argue for the advantages of weak > >crypto in certain circumstances > This is nothing but selfserving bullshit in a vain effort to justify YOUR > sellout for a paycheck. Nortel is nothing more than a Canadian schill for the SnoopSpooks. Just as the INSLAW Thieves & Murderers used Indian Reservations in an attempt to pretend that they weren't breaking US law because their actions were taking place on the soil of a Soverign Nation, the US criminals use the same bullshit logic to circumvent the laws that apply to their illegal actions. It is no coincidence that Nortel is the nesting place of a wide variety of censorship vermin such as Chris Lewis, and his ilk. An analysis of a number of employees of Nortel and their bum buddies shows that the time spent in their output of UseNet cancels and FUD posts and emails corresponds to the hours of a corporate work schedule. Nortel is nothing more than a front for the SnoopSpooks who want to capitalize on Canada's image as a Soverign Country to push their backdoor products in the global community. These are the same lame fuckers who pulled off this act in Switzerland, with governments and corporations buying security products from a country noted for its neutrality, and then finding out later that it was a front for a German company that had the CIA's nose up their butt. It amazes me that corporations and governments put their trust in any company with the word 'Security' in its name, without doing a check on their backgrounds and connections that is at least as intensive as they would do for a new employee.

1 0

Congress values your opinion
by ed＠justanote.com 17 Dec '03

17 Dec '03

Visit this URL: http://www.netline-to-congress.com/ and cast a vote that really counts.

1 0

UCE - Puts money in YOUR pocket!
by star＠1daystar.com 17 Dec '03

17 Dec '03

*********************************************************************************************************** This list has been run through all known remove lists. If we missed you and want to removed from this list, reply to neweb(a)1daystar.com with "remove" in the subject field. *********************************************************************************************************** Work SMART......not hard! Make $THOUSANDS$ a week and do absolutely NOTHING except pass out this 800 number with your code number. NO SELLING! NO HASSLE! A NO BRAINER!! This company does the selling for you, closes the deal, and sends you your money every Friday. Don't miss this opportunity! Call now! 1-800-811-2141 Code #44737 (This is HOT! If it is busy, keep trying). In Canada call 1-800-588-9786 Code #44737 PS. The company is Fortune 5000. They have been in business 15 months and are registered with the BBB in Junction City, KS.

1 0

Re: Why Jodi Hoffman must be called, etc. etc.
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Lizard wrote: >At 07:39 PM 11/4/97 -0500, Jodi Hoffman wrote: >>You're a bright one, aren't you? >>Not that I feel I owe anyone an explanation, but since you took the time >>and trouble to write so damn much..... >>CIN donated the webspace. Another Christian organization arranged for >>someone to build the website and, well, here I am. >>Aside from the fact that I didn't want to have to pay for _anything_, I >>think that was very generous of them, don't you? > >So, allying yourself with people who would gladly force *your* childen to >pray to *their* God doesn't bother you in the least. Fascinating. More telling, she doesn't seem to have a problem using a religious (and therefore tax-exempt) organization to push a political agenda. Apparently that whole 'separation of church and state' thing only applies when it's convenient. If religions want to play politics, the least we can do is get them to pay for the privilege. I'd feel a certain guilty pleasure seeing some of those bottom-feeders taxed into penury.

4 5

Re: Why Jodi Hoffman must be called a 'Dumb Cunt' and told to 'Go Fuck Yourself' at all costs, by TruthMonger
by Paul Spirito 17 Dec '03

17 Dec '03

From: Lizard <lizard(a)mrlizard.com>: > >So, allying yourself with people who would gladly force *your* childen to >pray to *their* God doesn't bother you in the least. Fascinating. Her Muse is Fear. She has that in common with her Christian allies. Paul Is this the progression of our lives or merely a comment on them?

1 0

Why Jodi Hoffman.....makes more sense than you think.
by Jodi Hoffman 17 Dec '03

17 Dec '03

From: Lizard <lizard(a)mrlizard.com>: > >So, allying yourself with people who would gladly force *your* childen to pray to *their* God doesn't bother you in the least. Fascinating. =========== Interesting that you should mention this. I, like many other Jews, have finally noticed something about Christians.... Seems they're actually _more_ Jewish than Jews. At least they (Christians) try to follow the Ten Commandments, which is a hell of a lot more than I can say for most every Jew I've ever known. Most Jews, other than Orthodox, self-identify as atheists and don't even know how to conduct a Passover service! Unless you're Orthodox, being Jewish is a joke. IMHO, claiming to be a Reform or Conservative Jew is the same as being "kind of" pregnant. (bracing for fresh onslaught of anti-Semetic spears to be chucked) -- Jodi Hoffman R.A.M.P. http://www.gocin.com/ramp Victimization of Children/Research & Education Council of America 1304 SW 160th Avenue, Suite 122 Weston, Florida 33326 Phone: (954) 349-0366 Fax: (954) 349-0361

6 5

maillist
by Carl Beasley 17 Dec '03

17 Dec '03

please include me on the mail list. thank you carl

1 0