December 2003 - cypherpunks-legacy

Cipher: IEEE TC on Security & Privacy Newsletter is online
by Avi Rubin 17 Dec '03

17 Dec '03

Newsgroups: sci.crypt,alt.security,comp.security.misc,alt.security.pgp Subject: Cipher: IEEE TC on Security & Privacy Newsletter is online Summary: Expires: Sender: Followup-To: Distribution: world Organization: AT&T Labs, Florham Park, NJ Keywords: Cc: Cipher is the electronic newsletter of the IEEE Technical Committee on Security & Privacy. We put out a newsletter by e-mail every couple of months. There is also a companion web site at: http://www.itd.nrl.navy.mil/ITD/5540/ieee/cipher/ Below is the table of contents of our latest issue. You can find subscription information on the web site, or just visit back from time to time. _/_/_/_/ _/_/_/ _/_/_/_/ _/ _/ _/_/_/_/ _/_/_/_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/_/_/_/ _/_/_/_/ _/_/ _/_/_/_/ _/ _/ _/ _/ _/ _/ _/ _/ _/_/_/_/ _/_/_/ _/ _/ _/ _/_/_/_/ _/ _/ ==================================================================== Newsletter of the IEEE Computer Society's TC on Security and Privacy Electronic Issue 28 July 13, 1998 Avi Rubin and Paul Syverson, Editors Bob Bruen, Book Review Editor Hilarie Orman, Assoc. Editor Mary Ellen Zurko, Assoc. Editor Anish Mathuria, Reader's Guide ==================================================================== http://www.itd.nrl.navy.mil/ITD/5540/ieee/cipher/ Contents: [3037 lines total] o Letter from the TC Chair o Letter from the Editor Security and Privacy News Briefs: o LISTWATCH: Items from security-related lists, by Mary Ellen Zurko o Microsoft Plans for FIPS 140-1 Compliance o Common Criteria Full-use Version 2.0 Completed o Purdue CERIAS Opens o US Government Announces Comprehensive Privacy Plan o Controversial Intellectual Property Law Headed Towards Enactment o SKIPJACK and KEA declassified, Biham et al. Announce Cryptanalysis o AES Submissions All In o DataFellows Reports On Word Macro Virus o Industry coalition pushes for new Encryption policy Commentary and Opinion: Book Reviews by Bob Bruen o Virtual Private Network. by Charles Scott, Paul Wolfe & Mike Erwin. Reviewed by Robert Bruen o Java Security. by Gary McGraw and Edward Felten. Reviewed by Robert Bruen o Java Security. by Scott Oaks. Reviewed by Robert Bruen o Java Cryptography. by Jonathan Knudsen. Reviewed by Robert Bruen o Protecting Networks with Satan. by Martin Freiss. Translated by Robert Bach. Reviewed by Robert Bruen Conference Reports: o IEEE Symposium on Security and Privacy (Oakland '98) by Mary Ellen Zurko o IEEE Computer Security Foundations Workshop (CSFW11) by Levente Buttyan o LICS98 Workshop on Formal Methods and Security Protocols by Scott Stoller Conference announcements: o ACM Conference on Computer and Communications Security o ASIACRYPT'98 New reports available via FTP and WWW: several New Interesting Links on the Web Who's Where: recent address changes Calls for Papers: NDSS, DCCA, ASSET, FC, PKC, S&P (Oakland), JCS, DPS Reader's guide to recent security and privacy literature o Conference Papers o Journal and Newsletter articles Calendar List of Computer Security Academic Positions, maintained by Cynthia Irvine Publications for Sale -- S&P and CSFW proceedings available TC officers Information for Subscribers and Contributors ********************************************************************* Aviel D. Rubin rubin(a)research.att.com Secure Systems Research Dept. Adjunct Professor at NYU AT&T Labs - Research 180 Park Avenue http://www.research.att.com/~rubin/ Florham Park, NJ 07932-0971 Voice: +1 973 360-8356 USA FAX: +1 973 360-8809 --> Check out http://www.clark.net/pub/mjr/websec/ for a new book on web security (The Web Security Sourcebook). *********************************************************************

1 0

UCE - I am a real Person sending you a real
by Power & Prosperity 17 Dec '03

17 Dec '03

I'm not here on the Internet to burden you with unsolicited advertising solicitations. If I've offended you in any way, I am sorry. If you do not wish to receive any more information, then do not respond to this message and you won't hear from me again. I do not re-use email addresses. After they are used ONCE, they are deleted. My point is brief. The reason I am writing to you is that I am overwhelmed with Leads. I would like to find just a few quality people to work with who have the desire to make six-figure results so that I can help them get started. I will not sell to anyone, nor will I do any convincing, and neither will you. If you would like more information, just say the words (words=GPG in the subject line of your return email) and I'll email a free, helpful file that will give you more information. Sincerely, Dobbin PS - Yes, I do read all your responses and I'll handle each one personally. Note: To comply with all Federal and State Laws, the following information is included. This message is sent by Dobbin Cashman (me) domiciled at 1064 Bunn Hill Road in Vestal, NY. (800) 350-5426.

1 0

No Subject
by Support Online Staff 17 Dec '03

17 Dec '03

Microsoft Office Support News Watch =================================== As a subscriber to the Microsoft Office Support News Watch, you receive e-mail twice each month that highlights some of the new articles recently published on Support Online, Microsoft's award-winning technical support web site. Office ====== For the latest information about Microsoft Office 97 SR-1 see these Knowledge Base articles. Q172475 OFF97: How to Obtain and Install MS Office 97 SR-1 http://support.microsoft.com/support/kb/articles/Q172/4/75.asp Q174422 OFF97: Microsoft Office 97 Service Release 1 Patch Update http://support.microsoft.com/support/kb/articles/Q174/4/22.asp Q150613 OFF97: Microsoft Office 97 Service Release 1 Patch http://support.microsoft.com/support/kb/articles/Q150/6/13.asp Q173990 OFF97: Troubleshooting the Microsoft Office 97 SR-1 Patch http://support.microsoft.com/support/kb/articles/Q173/9/90.asp Q156542 OFF97: Microsoft Office 97 Service Release 1 Enterprise Update http://support.microsoft.com/support/kb/articles/Q156/5/42.asp Q171749 OFF97: How to Determine If SR-1 Is Installed http://support.microsoft.com/support/kb/articles/Q171/7/49.asp Q172387 OFF97: Files Installed and Updated in MS Office 97 SR-1 Patch http://support.microsoft.com/support/kb/articles/Q172/3/87.asp Q172476 OFF97: Contents of the Microsoft Office 97 SR-1 Patch Readme http://support.microsoft.com/support/kb/articles/Q172/4/76.asp Net Show and the Microsoft Media Player ======================================= The Net Show Player has been replaced by the new Microsoft Media Player. The latest Net Show and Microsoft Media Player support information is available at: http://support.microsoft.com/support/NetShow/ Download the new media player at: http://www.microsoft.com/windows/mediaplayer/ Microsoft Chat ============== The latest support information for Microsoft Chat, version 2.5 is available at: http://support.microsoft.com/support/chat/ Get Support Online Articles by E-mail ===================================== You can also receive these articles (and others) in e-mail by sending a message to mshelp(a)microsoft.com. In the Subject line of your message, enter the Article-ID number (Qnnnnnn). For example to receive Q162721, your Subject line should resemble the following example: Subject: Q162721 You can have multiple articles sent to you in e-mail by typing multiple Article-ID numbers separated by a comma. For example: Subject: Q178049, Q174914, Q174062 To receive an index of articles, enter "Index" (without quotation marks) in the Subject line. For example: Subject: Index The MSHelp Index is updated monthly. For more information about MSHelp, see http://support.microsoft.com/support/kb/articles/q183/1/21.asp. Sincerely, The Support Online team ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Microsoft-sponsored events: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For information on all Microsoft-sponsored events, please visit: http://www.microsoft.com/events/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ How to use this mailing list: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ You received this e-mail newsletter as a result of your registration on the Microsoft.com Personal Information Center. You may unsubscribe from this e-mail newsletter, or subscribe to a variety of other informative e-mail newsletters, by returning to the Personal Information Center at http://register.microsoft.com/regwiz/personalinfo.asp and changing your subscription preferences. Alternatively, please send a reply to this e-mail with the word "unsubscribe" as the first line in the body of the message. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY. The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to change in market conditions, it should not be interpreted to be a commitment on the part of Microsoft and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. INFORMATION PROVIDED IN THIS DOCUMENT IS PROVIDED 'AS IS' WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND FREEDOM FROM INFRINGEMENT. The user assumes the entire risk as to the accuracy and the use of this document. This document may be copied and distributed subject to the following conditions: 1. All text must be copied without modification and all pages must be included 2. All copies must contain Microsoft's copyright notice and any other notices provided therein 3. This document may not be distributed for profit

1 0

[humor] Fwd: Win98's README.1ST
by Jean-Francois Avon 17 Dec '03

17 Dec '03

==================BEGIN FORWARDED MESSAGE================== >Subject: Win98's README.1ST Did you intend to upgrade to Win98? If you do, here's a preview of the READ ME FIRST page ------------------------------------------------------------------- Congratulations on your purchase of Windows 98 (c), the latest version of the world's #1 computer operating system from Microsoft. A) Before using your new software, please take the time to read these instructions carefully. Failure to do so may further limit the terms of the limited warranty. Windows 98 (c) represents a significant technological improvement over Microsoft's previous operating system, Windows 95 (c). You'll notice immediately that * "98" is a higher number than "95," * a better than 3 percent increase. But that's not all. Windows 98 (c) contains many features not found in Windows 95 (c), or in any competing computer operating system, (if there are any of course). Among the improvements: faster storing and retrieving of files (not in all models), enhanced "Caps Lock" and back-space functionality, smoother handling, less knocking and pinging, an easy-to-follow 720-page User's Guide, and rugged weather-resistant shrink wrap around the box. Most important, Windows 98 (c) offers superior compatibility with all existing Microsoft products. We're betting that you'll never use another company's software again. Windows 98 (c) comes factory-loaded with the latest version of Microsoft Explorer, the world's most popular Internet browser. And despite what you may have heard from the U.S. Department of Justice, Windows 98 (c) offers you the freedom to select the Internet browser of your choice, whether it's the one produced by the world's largest and most trusted software producer, or by a smaller company that will either go out of business or become part of the Microsoft family. Configuring Windows 98 (c) to use a browser OTHER than Microsoft Explorer is easy. Simply open the "Options" folder, click on the "time bomb" icon, and select "Load Inferior Browser." A dialog box will ask "Are you sure?" Click "yes." This question may be asked several more times in different ways and in 12 different languages ; just keep clicking "yes." Eventually, the time-bomb icon will enlarge to fill the entire screen, signifying that the browser is being loaded. You'll know the browser is fully loaded when the fuse on the time bomb "runs out" and the screen "explodes." If at any time after installation you become disappointed with the slow speed and frequent data loss associated with other browsers, simply tap the space bar on your keyboard. Microsoft Explorer will automatically be re-installed- permanently. Windows 98 (c) also corrects, for the first time anywhere, the "Year 2000" computer problem. As you may know, most computers store the current year as a two-digit number and, as a result, many will mistake the year 2000 for 1900. Windows 98 (c) solves the problem by storing the year as a four-digit number and, in theory, you won't have to upgrade this part of the operating system until the year 10000. However, the extra memory required to record the year in four digits has prompted a few minor changes in the software's internal calendar. Henceforth, Saturday and Sunday will be stored as single day, known as "Satsun," and the month of June will be replaced by two 15-day months called "Bill" and "Melissa." Please also take the time to complete the online registration form. It only takes a few minutes and will help us identify the key software problems our customers want addressed. Be assured that none of the information you provide, whether it's your Social Security number, bank records, fingerprints, retina scan or sexual history, will be shared with any outside company not already designated as a Microsoft DataShare partner. We've done our best to make using Windows 98 (c) as trouble-free as possible. We want to hear from you if you're having any problems at all with you software. Simply call our toll-free Helpline and follow the recorded instructions carefully. (The Helpline is open every day but Satsun, and is closed for the entire month of Bill.) If we don't hear from you, we'll assume your software is working perfectly, and an electronic message to that effect will be forwarded to the Justice Department. We'll also send, in your name, a letter to the editor of your hometown newspaper, reminding him or her that American consumers want software designed by companies that are free to innovate, not by government bureaucrats. Again, thanks for choosing Windows 98 (c). ===================END FORWARDED MESSAGE=================== Jean-Francois Avon, B.Sc. Physics, Montreal, Canada DePompadour, Société d'Importation Ltée Limoges fine porcelain and french crystal JFA Technologies, R&D physicists & engineers Instrumentation & control, LabView programming PGP keys: http://bs.mit.edu:8001/pks-toplev.html PGP ID:C58ADD0D:529645E8205A8A5E F87CC86FAEFEF891 PGP ID:5B51964D:152ACCBCD4A481B0 254011193237822C

1 0

FREE XXX VIDEO for your site !!
by Michael 17 Dec '03

17 Dec '03

Thats right FREE XXX VIDEO for your website.... - increase traffic - increase banner sales - BOOST your profit - Can be used by FREE SITE and PAY SITES FREE SITE webmasters go to http://free.nudevision.com MEMBERSHIP SITE webmasters go to http://www.nudevision.com/webmasters/index.htm We are offering PAY SITE website webmasters 90 MINUTE FULL LENGTH MOVIES which means SALES SALES SALES !! EARN 10 BUCKS A RAW CLICK AND GET FREE TRAFFIC !! "WHAT? Are you guys nuts?" Well maybe a little..... go to http://www.traffictraders2.com for more details. GAY SITE webmasters click here: http://www.studvision.com/webmasters/index.html Best Regards, The Cytron Gang Cytron Technologies Ltd. Cytron Communications Ltd.

1 0

Jim Bell Request
by John Young 17 Dec '03

17 Dec '03

A forwarded message from Jim Bell: Jim is requesting that cpunks try to get the Oregon newspaper to write up another story on his case. John Branton is the "crime reporter" for the Columbian newspaper (editors(a)columbian.com) Jim asks that people send Branton a note saying they would like to see a story on the issue of Jim's being spied on. This reporter already knows what the allegations are, but Jim wants to prod him into covering his story, because he thinks it's important enough for the public to know about it. Jim also would like any reporters on the list who are interested in talking to him, to send him their phone number and he will give them a call. BTW, the next hearing date is set for the 7/30/98. In the meantime, he's hanging around shooting pool, reading magazines, etc. [End Jim message] ---------- Jim's address: James Bell #26906086 Federal Detention Center P.O. Box 68976 Seattle WA 98168 ---------- Latest court docket entries: 6/30/98 50 MINUTE ORDER by Judge Franklin D. Burgess that the Probation Revocation hrg is rescheduled to 1:30 p.m. on 7/10/98 for James Dalton Bell (cc: counsel, Judge) (car) [Entry date 06/30/98] 7/8/98 -- PROPOSED Supplemental Violations (car) [Entry date 07/08/98] 7/10/98 51 PROBATION PETITION/ORDER by Judge Franklin D. Burgess as to James Dalton Bell re: Supplemental Violations (cc: counsel, Judge, USPO) (car) [Entry date 07/10/98] [END OF DOCKET: 3:97cr5270-0] ---------- Documents on Jim Bell: http://jya.com/jdbfiles.htm

1 0

No Subject
by Ian Briggs 17 Dec '03

17 Dec '03

Well since it looks like its a valid converstation peace here, I might as well give ya my 2 bits worth. >>http://www.ourfirsttime.com >> >>aww... ain't 'dat sweet.... >> > >I'd appreciate it more if I hadn't been spammed twice already by >self-proclaimed born-again Christians attempting to mobilize people >against those two kids... Or by one of the weaselly marketers in a while. Think of it. You creat a site based on a recent headline making Internet first <the women who had a child online>. Then you spam the shit out of everyone faking like your the oposition. You don't get nailed for spamming you give your opisition a black eye you artificially create a media blitz, since the news runs to cover this confrontation between the relegious right and the new internet morality. You get about a billion hits you add one or two click through adds or some other such thing to the web page Here comes the big day Bingo, a quick 30,000$ in your bank account. You sell the rights to porn companies to include in their feeds since there is so much product recognition. ;) smart little bastard not that I am saying that is what is going on. not that im cynical or anything.... Ian

1 0

NSA on Sat Crypto Device
by John Young 17 Dec '03

17 Dec '03

This is a DoD fax of an NSA-brief on the Chinese satellite crypto device. It was prepared for July 8 testimony by DoD's Franklin Miller before the Senate Subcommittee on International Security, Proliferation and Federal Affairs. Miller's testimony was cancelled but DoD has provided the one- page brief to the media upon request. JUL-14-1998 12:51 DEPARTMENT OF DEFENSE PA 703 697 3501 p.02 JUL 8 1998 Question: What happened to the encryption device that was aboard the failed INTELSAT launch in 1996? Answer: The U.S. personnnel present searched the site for two days after the launch failure. Despite extremely hazardous conditions that made recovery very difficult, the U.S. personnel believed that they recovered all recoverable U.S. parts and components that survived the launch failure. No identifiable parts or components associated with the Telemetry Tracking and Control Encryption devices [TT&C], and the circuit board on which it was mounted, were recovered. We have been advised by Loral that the devices were embedded on a tray mounted within the Command Processor Box of the satellite. lf this is the case, it is highly unlikely that the devices survived the crash because of the crash impact and high temperatures produced by the burning rocket propellants. According to Loral, the Command Processor Box was located adjacent to the propellant tanks and U.S. personnel at the site recovered only 30% of the box. The COMSEC circuit board consisted of a printed wiring board and forty plus, off-the-shelf and semi-custom discrete small sca]e integrated circuit chips. The COMSEC board is somewhat large and relatively fragile (about 6x10 inches), with interconnecting "tracks" on the board which interconnect the many logic devices into the COMSEC algorithm. As such a whole circuit board, its whole composite set of pieces, and the whole set of logic chips need to be recovered to succeed in reengineering the design of the device. If Loral's assessment of the physical implementation of the two COMSEC devices aboard INTELSAT 708 and the extent of damage to the command processor from the crash, impact and fire are correct, NSA and DTSA believe that it is highly unlikely that these items could have been recovered in sufficient detail to reverse engineer. In the unlikely event that the Chinese were able to recover all the items fully intact, it is important to note that the encryption board involved many embedded devices. Any loss of the chips and associated encryption algorithm would have have only minimal impact on national security because the INTELSAT 708 satellite was uniquely keyed. [End fax]

1 0

Here's the password you wanted....Don't pass it on
by teezi62＠nimbus.rz.uni-konstanz.de 17 Dec '03

17 Dec '03

What's up Gary, Here's the password. Don't, I repeat don't give it to anyone Remember press enter once you get there. USR: harry PWD: balls CLICK HERE>> http://www.hpic.com/public-bin/redirect.cgi?file=dick&clickline=0&cookie=no… Jorge

1 0

Re: FC: Why not to have "Privacy Commissioners"
by Anonymous 17 Dec '03

17 Dec '03

> Declan, These articles (unfortunately in German) are excellent > examples of the true purpose of EU-style "Privacy > Commissioners". Their purpose of course being to provide a whitewash > to privacy violating activities by the government. > Anyone want to translate 'em? Here's a very quick translation. I loved that bit where AltaVista translated "crackle" as "kneeling asterisk", anyway I hope this is more readable than those miracles of machine translation. SonntagsZeitung Online, July 12, 1998: The movement profiles do exist A confidential report by the data protection commissioner unveils: Swisscom collects the complete Natel cell phone data every three hours BY NIKLAUS RAMSEYER AND DENIS VON BURG BERNE - a secret report by data protection commissioner Odilo Guntern proves: Swisscom locates all powered-on Natel phones in Switzerland with an accuracy of 100 meters every three hours and stores these data for seven days. Things are not as bad as all that, it's all legal, and there's no problem whatsoever, the Swiss federal data protection commissioner Odilo Guntern appeased the public last Monday. Swisscom AG apparantly has "the possibility of locating every powered-on Natel at any time", he admitted. That however only within the so-called Location Areas comprising of 50 kilometers each - and certainly not down to the 2,500 a few kilometers small radio cells in the country "as claimed by the SonntagsZeitung", Guntern said. What the public did not learn: Gunterns lean three-page paper is only the tip of the iceberg. Hidden behind it there is a 30 pages long secret report that Guntern delivered only to "the parties involved", as he calls it. "Involved" are Swisscom, Leuenberger's (communications) and Koller's (justice and police) departments and the parliament's revisions delegation. Gunterns confidential report not only contains the crucial information to the Natel issue. It partly contradicts the public remarks and to a large extent confirms the SonntagsZeitung article of 28 December 1997. In particular Guntern concealed that the 800,000 Natel users in Switzerland can not only "be located", but are subject to a fully automatted Periodic Location Updating (PLU). PLU means: Every active Natel will announce itself to the closest antenna every three hours, then Swisscom will register its location. Each Natel owner can verify that himself: It is sufficient to put the switched-on mobile telephone next to a transistor radio. It then will emit a clearly audible galloping crackle. Movement data in some cases are stored for many weeks The location information covers not only "one of only 30 location areas" in the country, as Guntern wanted to make believe, it descends down to "radio cell level". In cities it has a precision of a few 100 meters - in open rural areas still a precision of max. 10 kilometers. At least that is what experts from a leading Natel company assure. Thus the quite precise Natel location is registered every three hours. Worse yet: Swisscom stores the cell phones' corresponding "movement data" for seven days - in some cases even for weeks and months. SVP member of parliament Bernhard Seiler, who is president of the parliament's GPK delegation, confirms these facts to the SonntagsZeitung. Data Protection commissioner Odilo Guntern too admits: "The subject PLU is discussed in detail in my report." He will not talk about "technical details" however. It is quick to calculate. Eight location reports from 800,000 cell phones per day, stored for one week: Swisscom permanently has more that 40 million data available on where and how the 800,000 Natels are moving through the country. They only serve for making connections, is said officially. But whoever has access to this information can immediately print out a "movement profile" and learn where exactly the Natel (and thus, its owner) has been during the past seven days. Guntern: "That is not impossible." Using radiogoniometics (see graphics) Swisscom can even locate each Natel to an exactness of 50 meters and tap the conversations. That also applies to the controversial Natel D Easy: "we have movement data and operational data for these devices as well", Odilo Guntern assures. That explains why the Conferedate Justice and Police Department and Federal Attorney General Carla Del Ponte demand that buyers of such devices should be registered systematically. If necessary the police would like to know whom the movement profile of a given Natels belongs to. And why did the Guntern report remain secret? The "parties involved" blame each other for the secretiveness. Guntern: "I didn't even ask them if they would like to publish the report, and decided myself that it was not public." The controlling authorities at the Swiss parliament are not going to accept that: "We were of the opinion that the entire Guntern report would be presented in public", says the SP deputy Werner Carobbio from Tessin, who also is a member of the GPK delegation. "We will bring up the issue of "movement profiles of Natel users" for deepened discussion", he promises. --------------------------------------------------------------- Les Temps Online, July 7, 1998: COMMUNICATION TELECOMS. Yesterday the federal data protection commissioner presented his annual report Odilo Guntern: «Natel owners must be able to remain anonymous» By Gabriel Sigrist In Switzerland, every citizen can walk into a store and acquire a smard part to be inserted into a portable telephone for 120 francs. Swisscom's system Natel D Easy does not require any subscription and thus the user can remain anonymous. This anonymity disturbs the Attorney General of the Confederation, Carla Del Ponte, who on several occasions set her face against a system «used by all the criminals». According to the department of public prosecution, the new ordinance on telecommunications imposed identification of Natel D easy users beginning January 1st. The federal data protection commissioner's report completely contradicts this assertion. «There is no legal base for keeping records of Natel easy customers», Odilo Guntern concludes in his annual report. The data protection commissioner goes even further: «In our society, protection of the individual requires the possibility to talk on the phone without being recorded in files, he stated towards Les Temps. Record the purchasers of «easy» cards does not make sense because the criminals use other means to remain anonymous, such as foreign cards but also call-back services or simply phone booths.» In the neighbour countries however the purchasers of such cards must declare their identity. «It is because the laws are different, explains Odilo Guntern. In Switzerland, identification is obligatory only when there is a long-term customer provider relation, which is not the case with pre-paid cards.» The card easy is thus legally comparable to a CFF multicourse subscription or a phone card to use in booths. Goods which can be acquired anonymously. However the debate is not closed: «In our opinion the legal base is sufficient to impose registration of the users, explains Jürg Blaser, spokesman of the department of public prosecution. It is essential for the security of our country to be able to identify the holders of portable telephones.» The federal Office of communications (Ofcom) will decide. According to Odilo Guntern, it currently remains «perfectly legal» to acquire a card easy without giving your name. Swisscom however encourages the purchasers to identify themselves: the operator offers a small gift to those who reveal their personal data. The comissioner also occupied himself with in the possibilities of tracing mobile telephones. According to his report, Swisscom can locate a simply powered-on portable in a relatively large zone, but not to the cell (a circle of ten kilometers). There too, opinions diverge. According to Christian Masson, enthusiastic activist of the freedom of circulation, the GSM system used by Swisscom's Natel stores the precise localization of the devices every three hours, for maintenance purposes. Odilo Guntern does not mention such a process in his report. According to Swisscom, the users' positions are erased during their movement. The report also puts emphasis on customer fidelity cards such as the M-Cumulus by Migros. «Any holder of such a card must be informed of the various discounts of which he can profit, as well as of the data processing relating to it», indicates the report. On the Internet: The full report of the federal data protection commissionser on www.edsb.ch The site of Mr. Masson on www.iimel.com/interception/mobile_trace.htm

1 0