December 2003 - cypherpunks-legacy

[ADMINISTRATIVIUM] Blowfish
by nobody＠replay.com 18 Dec '03

18 Dec '03

Many forgeries are traceable with mathematical certainty to feebleminded Timothy C[rook] Maya's poison keyboard.

1 0

SPA Press Release on ISP suits
by Robert Hettinga 18 Dec '03

18 Dec '03

--- begin forwarded text Mime-Version: 1.0 Date: Fri, 11 Oct 1996 12:36:55 -0400 Reply-To: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> Sender: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> From: Michael Dodson <dodsonm(a)WANE-LEON-MAIL.SCRI.FSU.EDU> Subject: SPA Press Release on ISP suits To: CYBERIA-L(a)LISTSERV.AOL.COM The formatting may be a bit rough. I am not a pro at this. FOR IMMEDIATE RELEASE ((edited)) Contact: David Phelps, (202) 452-1600, ext. 320, dphelps(a)spa.org SPA Files Copyright Suits Against ISPs and End Users Internet Anti-Piracy Campaign Launched (Oct.10, 1996 --Washington, D.C.) -- The Software Publishers Association (SPA) announced today that it has filed five civil lawsuits for copyright infringement occurring on the Internet. Three of the lawsuits were filed against Internet service providers (ISPs), and the remaining two were filed against individual end users. Additionally, SPA launched its Internet Anti-Piracy Campaign, which includes education and enforcement components, in an effort to educate and work cooperatively with ISPs regarding copyright infringement. ISP lawsuits were filed on Oct. 7 and 8 against Community ConneXion of Oakland, Calif.; GeoCities of Beverly Hills, Calif.; and Tripod Inc. of Williamstown, Mass. The SPA members named as plaintiffs in all three suits were Adobe Systems Inc., Claris Corp. and Traveling Software Inc. In each case, SPA first contacted the ISP and requested that the infringing material be removed, but the ISP failed to respond and cooperate. SPA also filed suit against Jeffrey Workman of Auburn, W. V., and Patricia Kropff of Scottsdale, Pa, on behalf of Adobe Systems Inc., Claris Corp., Corel Corp., Datastorm Technologies Inc. and Novell, Inc. In each of these instances, SPA received reports of alleged copyright infringement on certain Web sites, and with the assistance of the ISPs, tracked the individuals responsible for posting the infringing material. "These lawsuits send a clear signal to ISPs and end users that neither direct nor contributory copyright infringement will be tolerated. The Internet does not provide a safe haven for these types of activities," said Ken Wasch, SPA president. SPA's Internet Anti-Piracy Campaign (IAPC), which is outlined at http://www.spa.org/piracy/iapc.htm, contains information explaining why ISPs may be liable for copyright infringement, the risks involved and seven warning signs that infringing activity may be taking place on the ISP's server. Additionally, ISPs may sign an ISP Code of Conduct to show they have adopted the operating practices encouraged under the copyright law. Upon receiving a report of alleged copyright infringement on the Internet, SPA confirms the unlawful activity and sends a letter to the ISP servicing the infringing user. In most cases, the ISP cooperates and remedies the situation. If the infringing user can be identified -- as alleged in the Workman and Kropff cases -- SPA may then choose to seek action against the end user. If the ISP is unwilling to stop the unlawful activity, SPA may choose to file suit against the ISP. "Our intentions are to work cooperatively with ISPs. A key element of the IAPC is the ISP Education Program devoted to alerting ISPs to their potential liability and providing them with the tools and guidance to protect themselves," said Joshua Bauchner, SPA's Litigation Coordinator. "The IAPC maintains SPA's traditional balance between education and enforcement. We first make contact in an effort to amicably resolve the matter, and only when absolutely necessary do we turn to litigation." An integral part of the cooperative effort between SPA and ISPs is the ISP Code of Conduct. This simple agreement asks that ISPs protect themselves from liability by stopping pirate activity on their systems. In return, SPA will attempt to contact the ISP if it receives a piracy report concerning it -- before initiating other action. ((end of edited release)) See http://www.computerworld.com/news/news_articles/961010spa.html for early reactions. Michael Dodson dodsonm(a)wane-leon-mail.scri.fsu.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

3 2

Re: Londinium
by paul＠fatmans.demon.co.uk 18 Dec '03

18 Dec '03

> May be you knew this. A few months back in the UK, some nut flipped > and shot up a school full of kids, finishing up by shooting himself > (sadly for the press, his second cousin once removed, did not have an > internet account). Much media teeth gnashing about hand guns, and > tighter gun laws ensued. (The guy had a gun license, something which > is needed to legally own a gun in the UK.) Yeah, and we`re looking at more fucked up laws possibly completely banning handguns over here. > The Schoolyard Slaughter game is I think a joke by someone with a > funny sense of humor, playing on this incident. Actually the PD library distributing the game said it was produced and released some months before the incident in Dunblane, but I can`t verify whether they were just covering themselves or if this is the truth, whatever the case, it is irrelevant, the game will probably be removed from circulation now for no legitimate reason other than a few nutters on a mission against guns happen not to like it. Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: 5BBFAEB1 "Don`t forget to mount a scratch monkey"

1 0

Re: Clinton's Encryption Plan Fits Law and Market
by Ernest Hua 18 Dec '03

18 Dec '03

Two serious flaws in this letter ... 1. Secretary of Commerce, Mickey Kantor said: > You assume that foreign buyers would not buy key-recovery products, > but you ignore the trend -- especially in Europe -- to require use > of key-recovery products and bar the import of stronger and stronger > encryption products that do not take law enforcement into account. A. This is an old argument constantly rehashed by the government. What it convenient ignores is that no one OUTSIDE the government wants what the government schemes. No one wants the government to mandate key recovery. Some important uses of encryption, such as secure telephone conversations, simply do NOT need key recovery for ANY reason other than law enforcement intercepts. B. The point on other nations barring imports is absurd. Since WHEN do we tailor our export limits to the import limits of OTHER nations? C. The so-called "trend" he refers to is ARTIFICIALLY created by the U.S. government through secret lobbying efforts, the most recent at the OECD in Paris. The administration uses the word "trend" as if other nations are independently pursuing the key-escrow/key-recovery path, when in fact, only a few nations are considering such a move. Other nations, such as Japan, have openly opposed such a direction, and some nations, such as Sweden, have done so secretly because such a policy could not possibliy withstand the scrutiny of democratic processes. 2. Kantor said: > The National Research Council did not say that we should allow the > export of all encryption. Again, more mincing of words. The administration, seeing that the NRC report was staunchly against key escrow and government-mandated schemes, chooses to ignore parts of the report it feels is convenient. The NRC report, in fact, said that the government should immediately relax all symmetric encryption up to 56-bits and all public domain encryption UNCONDITIONALLY. It did not say anything about signing a pledge to develope key escrow or key recovery. This condition invented by the administration is nothing short of blackmail: "play it our way, or you have no chance to compete globally". In short, Kantor's letter is yet more blatant lies and deception on the part of the administration to get what it wants for law enforcement and national security agencies without any concern for the nature of the technology nor the economic impact such policies will have. -- Ernest Hua, Software Sanitation Engineer Chromatic Research, 615 Tasman Drive, Sunnyvale, CA 94089-1707 Phone: 408 752-9375, Fax: 408 752-9301, E-Mail: hua(a)chromatic.com

1 0

Re: (2) LET'S MEET DIMITRI
by attila 18 Dec '03

18 Dec '03

In <Pine.SUN.3.91.961010143953.7428A-100000(a)crl.crl.com>, on 10/10/96 at 02:40 PM, Sandy Sandfort <sandfort(a)crl.com> said: . attila sez: . .> WOW! Dimitri as the featured roast, Dean Martin style, would be .> enough for me to seriously consider leaving my high desert Utah .> safe house! . .Will you pledge a few bucks, though? . after I figure out how to allocate the $400+ it takes to get out of here --the disadvantage of living nowhere: $119 each way just to deal with SLC for transfer plus SLC to SFO/SJO it's too late in the year to even consider crossing the sierras on my chopper, ...other than airplane, the sole means of transport. sold my category D twin tprop since I do not have a valid medical endorsement from the FAA or the required certified copilot for Cat II or IIIA landings if SFO is pure blind slop. so, it's commerical time. so far, being in the high desert away from population in an enclave of 100 families as ornery as I, has been a blessing. travel had become more than old. hopefully you can make this one hang together --particularly, if I can be the roastmaster --and choose the panel... <g>

1 0

Re: Why not PGP?
by apteryx＠super.zippo.com 18 Dec '03

18 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Jim Ray wrote: >Rollo Silver wrote: [snip] >> 2. Suppose someone writes a program Z that has no expicit crypto code in >> it, but has hooks for installing one or another version of PGP. Given a >> copy of Z, someone in this country could install PGP he got from MIT, >> whereas someone in Europe could install the international version. >> Would export of Z violate ITAR restrictions? > >Yes. >JMR Does this mean that exporting Private Idaho, PGPfront, WinPGP, etc. would be a violation of ITAR because they function only when combined with PGP and contain "hooks" for using PGP? I don't recall any restrictions on who could download these files from their host sites. Mark -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMl6ZSN36bir1/qfZAQGUWAMAmbh59CK2wMBt/AVCEcwoiknVgIYMNRmS B2s4YJyvq5QQnUkynUcMSU17vltRhwQyapz22lg4rZZxYIoEC0P3vVDkH3mPCnnE qPSMtwtV+o1//cOQHjD7VfjeScO69R7u =Np5A -----END PGP SIGNATURE----- ----------------------------------------------------------------- Mark Heaney finger snipe(a)starburst.cbl.cees.edu for public key PGP Fingerprint= BB D8 9B 07 51 87 05 AC 47 7B F2 4F A6 AB 1A CD ----------------------------------------------------------------- You keep using that word, I dunna think it means what you think it means.

1 0

Re: BAY AREA CYPHERPUNKS SATURDAY 10/12 TRESSIDER HALL STANFORD
by Eric Chiu 18 Dec '03

18 Dec '03

At 01:06 AM 10/11/96 -0700, you wrote: >There will be a San Francisco Bay Area Cypherpunks meeting on Saturday 10/12 >at Stanford University. The meeting location will be the tables outside >Tressider Hall, where we've met for several previous meetings. >The canonical time is noon for lunch and milling around, and 1pm >for organized program. Bill - What time is the meeting? Eric Chiu IS-Finance and Adminstration Tel: 408-527-1665 Pager: 415-424-7282

1 0

SPA sues C2, other ISPs and users
by Greg Broiles 18 Dec '03

18 Dec '03

According to a 10/10/96 press release, the Software Publishers Association has files copyright infringement suits against three ISP's and two individual users. The three ISP's were Community Connexion of Oakland, GeoCities of Beverly Hills, and Tripod of Williamstown, Mass. The two users sued were apparently customers of other ISP's who turned over their names & contact information to the SPA. The press release, located at <http://www.spa.org/piracy/releases/netpir.htm>, indicates: "Piracy has taken many forms on the Internet. These include making unauthorized copies of software available for download, the posting of serial numbers, cracker and hacker utilities and links to pirate FTP sites. Although many believe piracy is limited to "warez" or illegal copies of software, it extends beyond that narrow definition. Under the law, anyone who knows -- or should have known -- of the infringement and who assists, encourages or induces the infringement is liable for indirect infringement. In each of the actions SPA filed, at least two of the above infringements were present. " The SPA has apparently adopted two relatively aggressive litigation strategies - putting ISP's in the position of disclosing otherwise confidential customer information or being sued themselves, and treating peripheral data about copyrighted works like copyrighted works themselves (e.g., serial numbers). Particularly interesting is that they seem to be claiming that a *link* to a pirate FTP site is itself infringing (potentially contributory infringement). (My comments above are made solely from reading the press release.) It's inappropriate to expect Sameer or any other C2 employee/agent/representative to discuss the suit before they've had a chance to find and meet with an attorney; in some circumstances it might never be prudent for them to make a public statement about the suit. But it certainly couldn't hurt for people who've thought about signing up with C2 to do so now as a show of support, nor for existing users to renew their service early. -- Greg Broiles | "We pretend to be their friends, gbroiles(a)netbox.com | but they fuck with our heads." http://www.io.com/~gbroiles | |

7 6

EUB bank on PRI "Marketplace" tonight
by David Lesher 18 Dec '03

18 Dec '03

Heard a teaser that EUBank will be mentioned on Public Radio Intl's Marketplace tonight. -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

Burma bans modems
by John Fricker 18 Dec '03

18 Dec '03

From: George Sadowsky <George.Sadowsky(a)nyu.edu> Subject: Re: Burma Bans modems Here is the text of the web page referenced below: RANGOON, BURMA, 1996 SEP 27 (NB) -- Burma has made owning, using, importing or borrowing a modem or fax machine without government permission a crime, punishable by up to 15 years in jail, according to a report by United Press International. Burma's military government has imposed what's called "The Computer Science Development Law" which empowers the Ministry of Communications, Posts and Telegraphs to specify what exactly can be restricted, UPI reports. UPI quotes the government-run newspaper New Light of Myanmar as saying the same punishment is prescribed for anyone who sets up a link with a computer network without the prior permission of the ministry, or who uses computer network and information technology "for undermining state security, law and order, national unity, national economy and national culture, or who obtains or transmits state secrets." UPI reports that in July a diplomat, Leo Nichols, died in prison after he was sentenced to a lengthy term for illegal possession of fax machines. It's clear from this action that the SLORC, i.e. the "State Law and Order Restoration Committee" (sic!) understands full well the benefits and importance of the Internet and other forms of electronic communication to open societies, and is determined to deny these benefits to its citizens. Given its recent history and the quasi-imprisonment of Daw Aung San Suu Kyi, this new action is perfectly consistent with the government's previous abysmal record. Countries who would deny open Internet access to its citizens might well pause to consider if they wish to be associated with the current government of Myanmar in doing so. George Sadowsky, Director Voice: +1.212.998.3040 Academic Computing Facility Fax: +1.212.995.4120 New York University 251 Mercer Street George.Sadowsky(a)nyu.edu New York, New York 10012-1185 http://www.nyu.edu/acf/staff/sadowsky/ --j You can retrieve my PGP public key by sending mail with subject "send pgp key". Take a look at www.Program.com for a good programmer web site.

1 0