December 2003 - cypherpunks-legacy

Netsurfer Digest: Vol. 04, #29
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text From: editor-bounce(a)netsurf.com Date: Fri, 2 Oct 1998 19:22:38 -0700 (PDT) X-Authentication-Warning: smtp2.zocalo.net: editor set sender to editor-bounce(a)netsurf.com using -f Subject: Netsurfer Digest: Vol. 04, #29 Mime-Version: 1.0 Precedence: bulk NETSURFER DIGEST More Signal, Less Noise Volume 04, Issue 29 Wednesday, September 30, 1998 <snip> BREAKING SURF Credit Card Data Compromised at Online Auction Sites Mark Dodd owns AuctionWatch, a neat auction site information center. He was running searches on the major search engines and by sheer accident uncovered a security hole in some software used by many of the online auction houses. It's a big one, too. If the auction site misconfigures its software, and apparently many do, the first happy hacker to come along can steal its customers' credit card numbers and addresses. Mark went to CNet with the story, which warned many of the affected sites of the potential havoc and scooped up a good story in the process. Remember, the safety of your credit card data is only as good as the security savvy of the webmaster guarding it. AuctionWatch: <http://www.auctionwatch.com/> http://www.auctionwatch.com/ CNet: <http://www.news.com/SpecialFeatures/0,5,26760,00.html> http://www.news.com/SpecialFeatures/0,5,26760,00.html <http://adex3.flycast.com/server/socket/127.0.0.1:2800/click/NetsurferDigest… ernetnews/123456> New Hacker Tactic: Slow, Coordinated Attacks from Multiple Locations A clever new twist in the evolutionary arms race between hackers and online security forces gives us an excuse to bring you this fascinating Web site. Hackers, it seems, have discovered herding behavior. Their latest tactic is to coordinate probes and attacks against online sites from a large number of separate machines and over a long period of time. By limiting probes to rates as low as two per hour and dispersing their sources, hackers can probe beneath current security software's threshold of detection. The Navy Cooperative Intrusion Detection Evaluation and Response team (CIDER) just released a report on the technique. The CIDER site is also worth visiting for information on security and intrusion detection software projects, notably a database comparing commercial and government tools. Cool spook stuff. CIDER: <http://www.nswc.navy.mil/ISSEC/CID/> http://www.nswc.navy.mil/ISSEC/CID/ Report: <http://www.nswc.navy.mil/ISSEC/CID/co-ordinated_analysis.txt> http://www.nswc.navy.mil/ISSEC/CID/co-ordinated_analysis.txt <snip> CONTACT AND SUBSCRIPTION INFORMATION Netsurfer Digest Home Page: Subscribe, Unsubscribe: Frequently Asked Questions: Submission of Newsworthy Items: Letters to the Editor: Advertiser and Sponsor Inquiries: Netsurfer Communications: <http://www.netsurf.com/nsd/>http://www.netsurf.com/nsd/ <http://www.netsurf.com/nsd/subscribe.html>http://www.netsurf.com/nsd/subscribe. html <http://www.netsurf.com/nsd/ndfaq.html>http://www.netsurf.com/nsd/ndfaq.html <mailto:pressroom@netsurf.com>pressroom(a)netsurf.com <mailto:editor@netsurf.com>editor(a)netsurf.com <mailto:sales@netsurf.com>sales(a)netsurf.com <http://www.netsurf.com/>http://www.netsurf.com/ CREDITS Publisher: Arthur Bebak Editor: Lawrence Nyveen Contributing Editor: Production Manager: Bill Woodcock Copy Editor: Elvi Dalgaard Netsurfer Communications, Inc. President: Arthur Bebak Vice President: S.M. Lieu Writers and Netsurfers: Sue Abbott Regan Avery Kirsty Brooks Judith David Joanne Eglash Lisa Hamilton Jay Mills Elizabeth Rollins Kenneth Schulze NETSURFER DIGEST © 1998 Netsurfer Communications, Inc. All rights reserved. NETSURFER DIGEST is a trademark of Netsurfer Communications, Inc. --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Re: A Number Theory Problem
by Michael Motyka 17 Dec '03

17 Dec '03

> There is a desert which is 1000 miles across. There is a camel who can carry > 1000 bananas maximum. The camel eats 1 banana per mile travelled. The camel > has a total of 3000 bananas to begin with. What is the maximum number of > bananas that the camel can get across to the other side uneaten? My camels don't understand/can't eat fractional bananas. My first camel put 2000 bananas at 200 miles then 1001 bananas at 533 miles then left 1 banana at mile 533 and sprinted for home, arriving with 533 bananas My second camel put 2000 bananas at 200 miles then 1001 bananas at 533 miles then ate 1 banana at mile 533 and found the energy to move the 1000 bananas to mile 534 and sprinted for home, arriving with 534 bananas My third camel put 2000 bananas at 200 miles then 1001 bananas at 533 miles then ate 1 banana at mile 533 and found the energy to move the 1000 bananas to mile 534 and sprinted for home, arriving with 535 bananas figuring he'd pay for his last mile with credit. My fourth camel, the biggest strongest camel, was already waiting at the destination and charged each of the other camels a 50% banana tax, rounded up to the nearest banana, plus a 10 banana collection fee and left with 832 bananas and didn't have to do anything but paperwork while the other camels were now short of bananas and had to find a new way to get more bananas. Mike

1 0

2 books of potential interest...
by Jim Choate 17 Dec '03

17 Dec '03

Hello, I was in Bookstop a while ago and noticed two books that could be of potential interest. The first I didn't buy, "We were soldiers once....and young", about the Ia Drang valley incident in Nov. of 65 (I had stated it was in '64 in the discussion about "The Best and Brightest"). It is written from notes and interviews with the survivors apparently. For those who are interested in the issues that were involved in the Vietnam War it may be of some use. The Law Enforcement Handbook D. Rowland, J. Bailey ISBN 1-56619-471-7 $6.98 (in the cheap books section) Looks to discuss a majority of police proceedures and details the items of interest to police officers in performing their duty. ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

IP: Wired News: Report of military personnel medical records hackis FALSE
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Delivered-To: ignition-point(a)majordomo.pobox.com From: Bridget973(a)aol.com Date: Fri, 2 Oct 1998 22:10:54 EDT To: ignition-point(a)majordomo.pobox.com Mime-Version: 1.0 Subject: IP: Wired News: Report of military personnel medical records hack is FALSE Sender: owner-ignition-point(a)majordomo.pobox.com Precedence: list Reply-To: Bridget973(a)aol.com http://www.wired.com/news/news/technology/story/15372.html Pentagon Takes Back Hack Wired News Report 7:45 p.m. 1.Oct.98.PDT The US Department of Defense said Thursday last week's report of crackers penetrating military Web sites and altering soldiers' medical files were inaccurate. Instead, a "Red Team" of American military computer experts carried out a simulated attack designed to test the security of the Pentagon's computer networks, said a spokeswoman for the Defense Department. "The simulated attack is part of the recent exercises to assess the danger to unclassified material, such as personnel records," Suzan Hansen said Thursday. The confusion arose last week, when Money told the Armed Forces Communications and Electronics Association Conference that crackers had accessed a medical database in the southeastern United States and changed blood types in soldiers' records. Hansen said that Money was merely referring to a Red Team exercise, not a real cyberattack. At the conference, Money reportedly said that the Red Team exercise prompted the Pentagon to develop a more restrictive security policy on the type of information that will be stored in military computers connected to the Internet. -- bridget973(a)aol.com Black Helicopters on the Horizon: http://members.xoom.com/bridget973 ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer ********************************************** --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

IP: Americans for Computer Privacy Call for Action in Congress
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Delivered-To: ignition-point(a)majordomo.pobox.com X-Sender: believer(a)telepath.com Date: Sat, 03 Oct 1998 09:14:11 -0500 To: believer(a)telepath.com From: believer(a)telepath.com Subject: IP: Americans for Computer Privacy Call for Action in Congress Mime-Version: 1.0 Sender: owner-ignition-point(a)majordomo.pobox.com Precedence: list Reply-To: believer(a)telepath.com Source: US Newswire http://www.usnewswire.com/topnews/Current_Releases/1002-121.txt Americans for Computer Privacy Call for Action in Congress U.S. Newswire 2 Oct 14:30 Americans for Computer Privacy Call for Action in 106th Congress To: Assignment Desk, Daybook Editor, Technology Writer Contact: Sue Richard for Americans for Computer Privacy, 202-625-1256, E-mail: suer(At)dittusgroup.com News Advisory: WHAT: Americans for Computer Privacy (ACP) will issue a coalition letter to House and Senate leaders urging legislation in the next Congress that will build on the reforms in encryption policy recently announced by the Administration. ACP will also report on the coalition's growth and future plans, as well as the response to its on-line advertising initiative. WHO: ACP Executive Director Ed Gillespie; Rep. Bob Goodlatte (R-Va.); Rep. Zoe Lofgren (D-Calif.); Rep. Sam Gejdenson (D-Conn.); Rep. Rick White (R-Wash.); Sen. John Ashcroft (R-Mo.); Sen. Conrad Burns (R-Mont.); Sen. Ron Wyden (D-Ore.); Robert Holleyman, Business Software Alliance; Jerry Berman, Center for Democracy and Technology; and Grover Norquist, Americans for Tax Reform. WHEN: Wednesday, Oct. 7, 11 a.m. WHERE: Room HC-7, U.S. Capitol, Washington, D.C. BACKGROUND: Since its formal launch in March 1998, ACP has worked closely with Congress and the Administration on encryption policy reform. While ACP acknowledges that progress has been made, the coalition believes the encryption issue is far from resolved. Americans for Computer Privacy brings together more than 100 companies and 40 associations representing financial services, manufacturing, telecommunications, high-tech and transportation, as well as law enforcement, civil-liberty, pro-family and taxpayer groups. ACP supports policies that advance the rights of American citizens to encode information without fear of government intrusion, and advocates the lifting of current export restrictions on U.S.-made encryption. For more information on ACP, please visit our website at www.computer privacy.org. A cybercast of the press conference will be available on the site on Thursday, Oct. 8. -0- /U.S. Newswire 202-347-2770/ 10/02 14:30 Copyright 1998, U.S. Newswire ----------------------- NOTE: In accordance with Title 17 U.S.C. section 107, this material is distributed without profit or payment to those who have expressed a prior interest in receiving this information for non-profit research and educational purposes only. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml ----------------------- ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer ********************************************** --- end forwarded text ----------------- Robert A. Hettinga <mailto: rah(a)philodox.com> Philodox Financial Technology Evangelism <http://www.philodox.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Internet Sales Tax Killed [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Note that I've added a few comments/notes between the supplied quoted sections. As always I've deleted for brevity. Forwarded message: > X-within-URL: http://www.cnn.com/ALLPOLITICS/stories/1998/10/02/internet.tax.ap/ > By CURT ANDERSON > AP Tax Writer > > WASHINGTON (AP) Legislation allowing states to force mail order and > Internet businesses to collect sales taxes failed in the Senate Friday > as debate began on how to tax cyberspace commerce. > > Senators voted 65-30 to table, or kill, an amendment authorizing any > state to require companies with significant catalog, mail order or > Internet sales to collect their sales tax and send it back to the > state. > > The sponsor, Sen. Dale Bumpers, noted that every business operating in > a state with a sales tax must already collect and remit the revenue. > He said the amendment effectively would reverse a 1992 Supreme Court > decision preventing states from enforcing sales taxes on companies > located outside their borders. Section 8. The Congress shall have Power To lay and collect Taxes, Duties, Imposts and Excises, to pay the Debts and provide for the common Defence and general Welfare of the United States; but all Duties, Imposts and Excises shall be uniform throughout the United States; No Tax or Duty shall be laid on Articles exported from any State. (Note that it doesn't say "Congress shall make no law..." but rather is an absolute prohibition of taxes/duties on exports of states. It therefore falls under the "prohibited" clause of the 10th.) > "If they choose to have a sales tax, the federal government should > allow them to enforce it," said Bumpers, D-Ark. > > Opponents, however, called the measure a hidden tax increase and were > able easily to defeat it for the sixth straight year. > > "Since this tax has never been collected, there's only one way to view > it," said Commerce Committee Chairman John McCain, R-Ariz. As unconstitutional. [remainder deleted] ____________________________________________________________________ The seeker is a finder. Ancient Persian Proverb The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

Re: Is the .to (Tonga) domain completely rogue and should be removed?
by Anonymous 17 Dec '03

17 Dec '03

Read RFC 1123, section 5.2.3. 5.2.3 VRFY and EXPN Commands: RFC-821 Section 3.3 A receiver-SMTP MUST implement VRFY and SHOULD implement EXPN (this requirement overrides RFC-821). However, there MAY be configuration information to disable VRFY and EXPN in a particular installation; this might even allow EXPN to be disabled for selected lists. A new reply code is defined for the VRFY command: 252 Cannot VRFY user (e.g., info is not local), but will take message for this user and attempt delivery. DISCUSSION: SMTP users and administrators make regular use of these commands for diagnosing mail delivery problems. With the increasing use of multi-level mailing list expansion (sometimes more than two levels), EXPN has been increasingly important for diagnosing inadvertent mail loops. On the other hand, some feel that EXPN represents a significant privacy, and perhaps even a security, exposure. VRFY is hardly an "incorrect SMTP command." >Your reasoning as to why its responses to incorrect SMTP >commands constitutes evidence that the .TO domain is "negligent", >"mismanaged" and "an attractive resource for criminal activities" >is ironically incorrect. In fact, having an *unsecured* port 25 open to mail >relaying would be negligent. >Best regards, >- Eric Gullichsen > Tonic Corporation > Kingdom of Tonga Network Information Center > http://www.tonic.to > Email: egullich(a)tonic.to

1 0

Govt breaks the law. They do it again!
by Jean-Francois Avon 17 Dec '03

17 Dec '03

THIS MESSAGE SENT AND/OR Cc'ed TO: Paul Martin, Finance Minister <Martin.P(a)parl.gc.ca> Anne McLellan, Justice Minister <McLellan.A(a)parl.gc.ca> Gary Breitkreuz, Reform Party MP <Breitkreuz.G(a)parl.gc.ca> Dr. Bernard Patry, Pierrefonds-Dollars MP <Patry.B(a)parl.gc.ca> Le Québecois Libre <libre(a)colba.net> auditoire(a)montreal.src.ca cypherpunks(a)toad.com Sporting.Shooters.Association(a)adelaide.on.net "Donna Ferolie"<teebee(a)sprint.ca> Date: Fri, 2 Oct 1998 16:26:47 -0600 From: David A Tomlinson <nfadat(a)telusplanet.net> Subject: Re: NEW ILLEGAL REQUIREMENTS >Canadian Firearms@CFC 10/01/98 09:17 AM >Bulletin No. 23 >Registration and the Firearms Identification Number >You will receive a Registration Certificate for each firearm you >register. Each Registration Certificate will have a unique number. >This will be the Firearms Identification Number (FIN) issued by the >Registrar, head of the Canadian Firearms Registry. The FIN is the >file number you will use for all contact with the office of the >Registrar. If your firearm has no serial number, or if the serial >number, combined with other features of the firearm, is not enough >to tell it apart from all other firearms, you will have to put the >FIN on your firearm. The Registrar will tell you if the FIN must >be placed on your firearm. The FIN will be required on nearly all firearms, as few of them have a well-documented system of Serial numbers that is KNOWN and PROVABLE. Many manufacturers -- especially manufacturers of military firearms for export -- duplicate Serial numbers with monotonous regularity. Others recycle the numbers -- as Iver Johnson did, numbering 9,000,000 revolvers with a machine capable of only 99,999 numbers before starting to recycle. Others, particularly Eastern manufacturers, use digits and/or letters that the registration system cannot handle (Cyrillic letters, for example). >Attaching the FIN to Your Firearm >You will have to put the FIN on your firearm only if the firearm >has no serial number or the serial number is not unique. There is no way to tell whether or not a particular Serial number is UNIQUE. The word "unique" designates an absolute -- That is, it is guaranteed that there is NO other firearm of that type with that Serial number. That is a standard that is clearly unreachable. The Serial number is an indicator, but it can never be certified as "unique" because there is always at least the problem of fraud in the factory producing one or more firearms with duplicated Serial numbers. >If you >have to put the FIN on your firearm, you have a choice of how you >apply it in three situations: 1) if you own your firearm on >December 1, 1998; 2) if your firearm was manufactured before >December 1 and imported into Canada on or after December 1, 1998; >or, 3) if you, as a licensed business, specially import the firearm >for a short time only (such as a film company making a movie in >Canada). In these cases, you may attach a FIN using a special >sticker provided by the Registrar or, you may permanently engrave >or stamp the FIN on your firearm. The above is a very muddled paragraph, which I split into two parts. The above section apparently identifies the three classes of firearms which can be identified by the use of a permanent "sticky." It offers the OPTION of stamping of engraving the FIN on the "frame or receiver" of the firearm. > With all other firearms needing >unique identification, you must permanently engrave or stamp the >FIN. In most cases, the FIN must be easy to read and on a visible >part of the frame or receiver (see next CFC Bulletin for further >details). You will have 30 days from the issue date on the >Registration Certificate to attach the special sticker to your >firearm. You will have 90 days from the issue date on the >Registration Certificate to permanently engrave or stamp the FIN >on your firearm. This second half of the paragraph (above) requires engraving or stamping of the FIN on all other classes of firearms, such as all firearms manufactured after 01 Dec 98. >For more information, or for a copy of the Firearms Act, its >regulations and other CFC publications, contact us at: >1-800-731-4000 (Toll Free) >Web site: http://www.cfc-ccaf.gc.ca/ >E-mail: canadian.firearms(a)justice.x400.gc.ca Fortunately, all of this is apparently NULL AND VOID. No such requirements may be demanded by the CFC or CFR/FRAS unless they are: 1. required by the legislation (C-68's Firearms Act or Criminal Code), or 2. the subject of an Order in Council authorized to be made by the legislation. The legislation apparently says nothing whatever about where or how the Serial number must be on the firearm, and does not mention the Firearms Identification Number concept at all; therefore, the above requirements are apparently null and void as far as the legislation is concerned. The legislation does not authorize the making of any regulation regarding markings on firearms, and therefore the above rules apparently cannot be created by Order in Council. Once again, this is apparently a defective attempt to amend defective legislation by false pretences, and an attempt by the CFC and CFR/FRAS to legislate -- but legislation is beyond their power, so this entire set of requirements is apparently null and void. A copy of this is being sent to the CFC and to CFR/FRAS. CFC and CFR/FRAS, this is a demand for an explanation as to why this apparently illegal and misleading information was published and distributed. Please reply to the Canadian Firearms Digest with all possible speed, and either explain why you think you had the authority to publish it -- or publish a retraction. Dave Tomlinson, NFA -- CLOG: all Conservative or Liberal Ottawa Governments ------------------------------ Jean-Francois Avon, B.Sc. Physics, Montreal, Canada DePompadour, Société d'Importation Ltée Limoges fine porcelain and french crystal JFA Technologies, R&D physicists & engineers Instrumentation & control, LabView programming PGP keys: http://bs.mit.edu:8001/pks-toplev.html PGP ID:C58ADD0D:529645E8205A8A5E F87CC86FAEFEF891 PGP ID:5B51964D:152ACCBCD4A481B0 254011193237822C

1 0

STUFFED IS NOW FASTER THAN EVER/WE HAVE 1,000S OF NEW MEGA-HOT FREE PICS!
by STUFFED NEWS DAILY 17 Dec '03

17 Dec '03

+ 30 MEGA HI-RES PICS + 5 SUPER-HORNY SEXY STORIES + I SAW SATAN IN MY BURGER + AMERICANS VERY SLOW IN BED + MMMMM THAT WAS GOOD + THE CULT OF TWINKIE + THE BEST OF EUREKA ----> http://stuffed.net/98/10/3/ <---- Welcome to today's issue of Stuffed. To read it you should click on the URL above. If it is not made clickable by your email program you will need to use your mouse to highlight the URL, copy it and then paste it into your browser (then press Return). This email is never sent unsolicited. Stuffed is the supplement for the Eureka newsletter you subscribed to. Full instructions on unsubscribing are in every issue of Eureka! ----> http://stuffed.net/98/10/3/ <----

1 0

IP: ISPI Clips 5.9: Canada Frees Up Crypto--WIRED
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

From: "ama-gi ISPI" <offshore(a)email.msn.com> Subject: IP: ISPI Clips 5.9: Canada Frees Up Crypto--WIRED Date: Fri, 2 Oct 1998 00:10:43 -0700 To: <Undisclosed.Recipients(a)majordomo.pobox.com> ISPI Clips 5.9: Canada Frees Up Crypto News & Info from the Institute for the Study of Privacy Issues (ISPI) Friday October 2, 1998 ISPI4Privacy(a)ama-gi.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This From: WIRED News, September 1, 1998 http://www.wired.com Canada Frees Up Crypto http://www.wired.com/news/news/politics/story/15362.html by Matt Friedman, mwf(a)total.net In a move that will almost certainly create friction between the US and Canada, the Canadian government has released a new cryptography policy that encourages the proliferation of powerful data-scrambling technologies. The policy, announced Thursday by John Manley, the minister of industry, makes it clear that Canadians will not have to submit to mandatory key recovery, which would give the government access to all scrambled communications. The document also heads off the establishment of a national public key infrastructure. "In terms of domestic policy, it couldn't be better," says David Jones, president of Electronic Frontier Canada. "Industry Canada is essentially saying that, domestically, you can pretty much do whatever you want with cryptography." An American civil liberties advocate was similarly impressed. "It is great. It's a policy for the 21st century, as opposed to the US government's policy update from last week, which is too little, too late," said Susan Landau, a cryptography policy expert and the co-author of Privacy on the Line: The Politics of Wiretapping and Encryption. Canada's new policy is a setback to the country's "signals intelligence" spy agencies. Industry Canada had been under considerable pressure from the intelligence and law-enforcement communities, both at home and in the United States, to establish domestic crypto controls. "The US has sent a number of delegations to Canada, a number of times, to try and convince [the Canadian government], to go with a restrictive view," said David Banisar, policy director of the Electronic Privacy Information Center in Washington, DC. "The Canadians clearly said they were not interested." Last winter, when Ottawa published a public white paper on cryptography and solicited comments from the public and other branches of government, the Canadian Security Intelligence Service said that it was pushing for a public key-recovery plan. The CSIS is concerned both with domestic and foreign intelligence, sort of a combination of the FBI and CIA. "The ability to decrypt messages and data has a significant impact on our ability to monitor security threats to Canadians," said CSIS spokeswoman Marcia Wetherup at the time. Reached for comment Thursday morning, Wetherup said, "That continues to be the service's main concern at this time." While the Canadian government has rejected controls on domestic crypto, it is taking a wait-and-see attitude on exports. In the US, cryptography exports are strictly regulated, on the grounds that the technology might be used to conceal the communications of terrorists or hostile nations. "The Commerce Department is not going to be happy," Landau said. A Commerce Department official declined comment. Under the new policy, Ottawa will continue to work within the framework of the Wassenaar agreement. That document, an international treaty limiting the spread of munitions technologies, is currently being renegotiated. Sunny Handa, a cyberlaw specialist with the Montreal law firm Martineau Walker, points out that the new policy will not alter existing regulations governing the export of Canadian crypto technology or the re-export of technology originating in the United States. "The real issue now is export," he says. "That hasn't changed." The new policy does, however, make the point that the Canadian government will "deter the use [of crypto] in the commission of a crime," and in the concealment of evidence. Moreover, existing search-and-seizure laws will apply to encrypted messages. But Handa says that Industry Canada is simply "throwing a bone to the police." "Our search-and-seizure laws are pretty good right now," he says. "Citizens' rights are protected, and law enforcement officials can do their jobs. If Industry Canada has signaled that it's happy with them, we probably won't see new legislation in this area for years." "One way to view the issue of cryptography is as an issue of crime prevention, rather than crime detection," said Landau. "As we enter the wired world, cryptography will become extremely important to crime prevention, and the Canadians recognize that." Copyright © 1994-98 Wired Digital Inc. --------------------------------NOTICE:------------------------------ ISPI Clips are news & opinion articles on privacy issues from all points of view; they are clipped from local, national and international newspapers, journals and magazines, etc. Inclusion as an ISPI Clip does not necessarily reflect an endorsement of the content or opinion by ISPI. In compliance with Title 17 U.S.C. section 107, this material is distributed free without profit or payment for non-profit research and educational purposes only. --------------------------------------------------------------------------- ISPI Clips is a FREE e-mail service from the "Institute for the Study of Privacy Issues" (ISPI). To receive "ISPI Clips" on a regular bases (up to 3 - 8 clips per day) send the following message "Please enter [Your Name] into the ISPI Clips list: [Your e-mail address]" to: ISPIClips(a)ama-gi.com . The Institute for the Study of Privacy Issues (ISPI) is a small contributor-funded organization based in Victoria, British Columbia (Canada). ISPI operates on a not-for-profit basis, accepts no government funding and takes a global perspective. ISPI's mandate is to conduct & promote interdisciplinary research into electronic, personal and financial privacy with a view toward helping ordinary people understand the degree of privacy they have with respect to government, industry and each other and to likewise inform them about techniques to enhance their privacy. But, none of this can be accomplished without your kind and generous financial support. If you value in the ISPI Clips service or if you are concerned about the erosion of your privacy in general, won't you please help us continue this important work by becoming an "ISPI Clips Supporter" or by taking out an institute Membership? We gratefully accept all contributions: Less than $60 ISPI Clips Supporter $60 - $99 Primary ISPI Membership (1 year) $100 - $300 Senior ISPI Membership (2 years) More than $300 Executive Council Membership (life) Your ISPI "membership" contribution entitles you to receive "The ISPI Privacy Reporter" (our bi-monthly 12 page hard-copy newsletter in multi-contributor format) for the duration of your membership. For a contribution form with postal instructions please send the following message "ISPI Contribution Form" to ISPI4Privacy(a)ama-gi.com . We maintain a strict privacy policy. Any information you divulge to ISPI is kept in strict confidence. It will not be sold, lent or given away to any third party. ********************************************** To subscribe or unsubscribe, email: majordomo(a)majordomo.pobox.com with the message: (un)subscribe ignition-point email@address ********************************************** www.telepath.com/believer **********************************************

1 0