December 2003 - cypherpunks-legacy

ANNOUNCEMENT: ALICE'S ADDRESS REVEALED.
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

As I promised, I've now opened a channel so that anyone who wants to can send Alice de 'nonymous email. I can now be reached via an455120(a)anon.penet.fi. Mail sent to Alice de 'nonymous at that address will get to me, and I will do my best to reply to you as well, but I can't guarantee, anything. And before I get attacked for wasting bandwidth, I've got a deal to make it all worthwhile. A temporary break from GAK talk ... a pointer to a truly HOT website. Here's just a small sample of what you'll find there: :| ELIMINATING LIMBO :| :| "So the pope eliminated Limbo, did you hear?" she says :| "What?" :| "You know the pope, right, well he eliminated Limbo..." :| "When?" :| "I don't know, a while ago." :| "Well that means we're fucked..." :| "You got it." :| "What's Limbo for?"asks Jessica :| "That's where all the people that were around before they had the :| chance to get the word of christ get to go...and unbaptized babies :| that die early..." :| :| "It's not as good as Heaven, but it beats the hell out of the other :| options." :| "How can he just eliminate it like that?" :| "Cause he's the pope..." Check all of this out and MORE at the SCARED SACRED site. You'll be able to read the pope's "LETTER TO ALL THE WOMEN OF THE WORLD". :| "What he wrote a letter to all the women of the world? Man, his direct :| mail expenses must be huge!" :| "Yeah the people in the Vatican are just freaking out..." But you have to be running NETSCAPE. (1.1....NOT 2.0....OR IT JUST WON'T WORK...) Point your Navigators to http://www.banffcentre.ab.ca/ and then choose the --> Media & Visual Arts Page <-- and then from there the --> Artists Web, <-- and then just look for --> VELCRO RIPPER. <-- BE CAREFUL THOUGH IF YOU ARE PRONE TO EPILEPTIC ATTACKS!!!! IF YOU ARE, CHOOSE THE DIRECT ENTRANCE AND ENTER THERE!! YOU HAVE BEEN WARNED!!! Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

3 2

Re: A "Warning Banner" for Netscape Navigator? Good idea!
by rah＠shipwright.com 17 Dec '03

17 Dec '03

It's been a long and interesting day... >Pull down the 'Options' menu, grab the 'Window and Link styles' >page, and change the default "home page location" from >netscape's to whatever you want. Oh. *Those* advertisements! I couldn't for the life of me figure out *what* Tim was talking about. I've made mine come up blank since the initial, "Hey, what do these twiddly bits in the Preferences command do...", session after the first download. You can also put up a type-it-yourself URL window on the browser window, which comes in handy now that you have to wait 10 seconds (on my dinky PB 180) every time you change code modules in 2.0b3 Netscape (like touching<!> the menu bar for the first time, or looking at the bookmark window)... Like I've said elsewhere, Netscape is hierarchical code trying to conquer a geodesic (a word I got from Bucky Fuller, through Peter Huber, just so I keep my attributions straight...) network. It ain't gonna fly, in the long run, folks. In that vein, could someone e-mail me the best non-netscape Mac browser, so I don't get HTML-nasties when I go play on the cactus machine? Anyway... Dave Winer(sp?), the Mac-Developer-turned-gadfly (speak not ill of the other gadflies, I always say...), talks about seeing some Netscape (sorry...) patches which actually *do* strip banner ads from various web-pages. I believe you have to tell it which pages, and what the banners' file names are, but I'm not sure. Don't know where *Weiner(sp?)* got it from... I seem to remember the name "Ad Stripper" but I could be imagining things... Of course, if that's the way this code really operates, simply changing the name of the HREF call regularly on the server side, which is probably done anyway, with all the web-management code showing up out there, defeats ad-filters of this kind completely... Obcrypto: Maybe these web-pages will send you nanocash (not mine, either, sorry, taken from one of the wearable-people at mobileworld, I'll look up their name, and get back to you. soon. I promise.) to watch their message? Also, could someone talk here about how easy it might be to spoof Java "byte code"? The Java presentation at this conference had a lot of hand-waving and reverent invocation of Whit Diffie's name, so it might not be trivial. Another feature of this presentation was a really splendid "subjective axis" chart showing how "powerful" Java is in comparison to say, client-server, HTML, and other "technologies". This chart reminded me for all the world of the famous "Pravda Charts" that Tufte likes to lampoon in "The Graphical Representation of Quantitative Information". Just so I keep my sources straight. Of course. To quote Prof. Tufte. "If it looks like a duck, ignore it." Or something to that effect. Maybe the word "waddle" was in the sentence. Maybe he got it from someone else... I'll get back to you on that. I really will... ;-). Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell The NEW(!) e$ Home Page: http://thumper.vmeng.com/pub/rah/ >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Info on Netscape's key escrow position
by Jeff Weinstein 17 Dec '03

17 Dec '03

I had lunch with Jim Clark today, and explained the furor that was currently going on in cypherpunks and elsewhere. After lunch he sent me the e-mail that I've attached below to pass along. I think the gist of it is that if governments require key escrow, we will have to do it in order to sell our products with encryption into those countries. We've actively lobbied against the government's proposal through our participation and support of industry efforts by the ITAA, BSA, SPA and others. Next week we will be sending two representatives to the NIST key escrow conference in DC. In preparation for that meeting we have been formulating an official company position on key escrow and export restrictions. Phil, myself, and other folks with cypherpunk leanings are involved in writing the policy statement. We are planning on taking a firm position against the government's key escrow proposals. Some time next week we will be posting our statement publicly, and will welcome your comments on it then. After the NIST meeting we will also be talking to folks in congress and the white house about our position, looking for help in getting the current export limitations removed. We will also be looking for help in getting the government's position on export controlled FTP sites clarified so that we can make the US version of the Navigator with 128-bit crypto available for download by those people who are legally allowed to use it. We don't have any plans to stop doing separate US and export versions of our software. As long as our customers want strong crypto and the government lets us sell it, I think we will keep doing it. --Jeff Jim Clark wrote: > > I made some pragmatic comments. > > I said that if we are to use this encryption technology in business, we must > have a better solution than to limit keylength or put keys in escrow. All > governments of the world have a valid concern about terrorism and other > activities of concern to the security of their nations. All of them will > continue to restrict our ability to provide products to their markets unless > we build in some mechanism that allows them to legally access > information that is in the interest of their national security. (We obviously > cannot be involved in determining what is legal by the laws of that country.) > This is not just a US government problem. Until recently, France did not even > allow us to sell products with 40-bit keys, much less 128-bit keys. > > A lot of ordinary citizens are rightly concerned about their own privacy. I > am one of them. I do not want the government to snoop on me, but in fact the > government, through the FBI, can now tap my phone without my knowing it by > simply getting sufficient evidence that I am conducting illegal activities, > then presenting this evidence to a court to get permission. I have no say in > the matter. > > If we as a company were to take the position that in no case will we allow > a government to get access to our encrypted messages, or refuse to allow > key escrow with our products, the governments of the world will quickly put > us out of business by outlawing the sale of our products in their countries. > The fundamental issue is how do we accommodate the requirements of governments, > while protecting our rights as citizens. > > None of this represents the position of Netscape with respect to what we > will do. But if we do not come up with a solution to this problem that is > acceptable to each government, we will not be able to export our products, > except with a short key length (e.g. 40 bit keys), and that will not be > acceptable to corporate customers in other countries. They will create their > own solution, and we will not be able to sell to a larger world market. In > fact, we could even be ordered by our own government to establish a key > escrow system for its use inside the US. > > Ironically, anyone in the US may import unbreakable encryption technology from > another country -- we just cannot sell it back to them. No one ever accused the > government of being rational. > > I chair an industry group called the "Global Internet Project", with members > from almost twenty companies, including companies from Asia and Europe. This > was the central issue we all agreed upon this morning, and we are putting > together a policy statement whose purpose is to educate lawmakers on the > importance of quick resolution of this matter. > > Thanks for your concern. Let me know what you like and don't like. Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw(a)netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine.

6 6

No Subject
by Anonymous 17 Dec '03

17 Dec '03

The recent flap over Netscape and GAK ought to serve as a wakeup call and a reminder of the advantages the anarchstic GNU/FSF paradigm of software development has over the corporate model. No one can control GNU code, and no entity can impose changes on everyone else. If everyone was using GNU browsers and ssl servers right now we'd be safe. Competing with Netscape is obviously something that's easier said than done. But we ought to consider the strategic importance of having robust, free, open source packages for security applications, even if affordable and high quality commercial products exist.

5 4

update.250 (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message:

1 0

Utilize This Valuable Information and It Will Pay For Itself Right Away
by 61033134＠aol.com 17 Dec '03

17 Dec '03

<HTML><PRE><BODY BGCOLOR="#000000"><FONT COLOR="#00FFFF" SIZE=3> UTILIZE THIS VALUABLE INFORMATION AND IT WILL PAY FOR ITSELF MANY TIMES OVER! That tiny little ad can make you wealthy! Have you ever bought anything from a classified ad? If you're like most, the answer is yes. It's a fact of life, that we as a society crave the need for information. The tiny little classified ad can effectively and efficiently deliver the information to a potential customer base that is mind boggling. A simple classified ad can fill your mailbox with orders or make your phone ring off the hook with interested prospects. Have you ever seen the same ad running over and over again in a paper? It's because it's making money. In fact the chances are good that it's in a whole lot of other papers also. Classified ads can and have made many people very wealthy. How do you think all those late night info-mercial millionaires started? ***Nationwide Newspapers V2.0 TM*** Powerful New Reference Software - The First of its Kind, Classified Advertising Tool! - Electronic Directory of over 3,600 newspapers! - Sources for Over 6,000 newspapers! - Daily, Weekly, Shoppers, Community Papers and More! - Find Hard to Reach People to Respond to Your Offer! - Advertise by City, State, Regionally, or Nationwide! - Statewide and Network Advertising, Including Pricing! - Discount Advertising Less Than $1 Per Paper! - Powerful Tool for Building Huge Downlines! - Save Time and Money with Network Advertising, 1 Call, 1 Payment & you're in 100's of Papers with Millions of Readers, at a Big Discount Over Individual Rates! SPECIAL FEATURE- Built in Sort Tool Enables Sorts by State, City, Circulation, Phone Number & More! Proof is in the Results! Here's just a few: " Thank you for your 3,600+ newspaper directory! We have built a downline of 1,800 people in 6 months & a check for over $12,000 using this directory to advertise! It contains the small town papers as well as the big ones so we can target the audience & stretch our advertising dollar. I recommend it for anyone in network marketing." S & J Linden, Sequim, WA " I just wanted to let you know how much your program has saved me time and energy, now I can place ads with ease. I think your program is simply one that anyone who has a business must have, because time is money." Andrea Hurst-Harry, Arlington, TX There is no doubt that this information can and will be a valuable asset to your business. It's the perfect product, at the perfect time, at the perfect price. We've seen similar information costing 100's of dollars. Companies charge these high fees because they know that people who understand the value of the information will easily pay for it. Our products are more advanced and we make them affordable. They say that information is power, well we look forward to supplying you with all the power you need for years to come! Price: Other companies marketing half the information we offer are charging $249 For a limited time , You pay only $49 plus shipping for this revolutionary new product. To Order Send to: S. Press PO Box 11511 New Brunswick, NJ 08906 ***Please Add $6 for shipping and handling Name:_________________________________________ Address:______________________________________ City:_____________________State:____Zip:______ Payment Method: __CHECK __MONEY ORDER Total Enclosed: $_49 + 6 =$55 _____________ </FONT><FONT COLOR="#000000" SIZE=3>

1 0

Re: GAK, Netscape, CyberDog, and you.
by Rich Salz 17 Dec '03

17 Dec '03

Bob, Please stop this habit of cross-posting to every mailing list; 999 times out of a thousand the resultant discussion helps neither list. And my god, five lists this time, at least some of which have over a thousand readers? NB: Followups redirected. /r$

1 0

John Gage's comments at Computer Security Day in Cleveland
by fc＠all.net 17 Dec '03

17 Dec '03

John Gave gave an interesting pitch for Java at the CSSI Computer Security Day sessions in Cl;evelan yesterday (November 30). Among his comments were: Java is not secure - it is "safe" He (John Gage) regularly downloads binary executables from the Internet and runs them on his workstation at Sun - (connected to the internal Sun network). Sun has terrible physical security - unknown people roam the halls at night all by themselves. In 2 years, you will be able to buy a computer that does more than a Sparc now does, in a portable package the size of a cell phone, with more than 30 million bits per second of mobile bandwidth direct to the Internet, for less than $30. -> See: Info-Sec Heaven at URL http://all.net/ Management Analytics - 216-686-0090 - PO Box 1480, Hudson, OH 44236

1 0

Re: Getting a copy of the Jim Clark speech
by James A. Donald 17 Dec '03

17 Dec '03

At 12:38 AM 12/1/95 +0600, Ed Carp wrote: >The only problem with this approach is that this will bite other >browsers that have started supporting the so-called "Netscape >extensions". More than one person has coded the Netscape stuff into >their pages because it gives the author more flexibility than the >standard 1.0/2.0 standards. And there aren't many browsers out there >yet that support 3.0. http://www.netmanage.com/ have a free browser that supposedly supports 3.0 -- I have not tested it yet, though I downloaded it a short while ago. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: ALERT: On Monday, call Congress to stop Big Brother amendment!
by Carl Ellison 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 02:47 PM 9/18/97 -0400, you wrote: >3. Say that you're calling to urge the Congressman to pass SAFE (HR695) > without amendments. Does that mean Goodlatte's original bill, or the bill as amended already by the National Security Subcommittee? I believe you should be more specific in your instructions -- suggesting that people ask for the bill to be voted against unless it is exactly as it was prior to the Natl Sec involvement. ..or, assuming it's going to be amended and we can't stop that, ask people to ask for a vote against the bill -- not for it. I'm worried that the person on the phone will check the box under "vote for" and not puzzle out the amendment level. If bills changed number when amended, this wouldn't be such a problem -- but as it is, I really worry. - Carl -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQCVAwUBNCKoDVQXJENzYr45AQEYwAQAh3Z5IDymS1G44qi1B0HdlVEAtmZHwhum 4KrINQpJW/pX37QCiiAklLpsvkBP2MAvGTB5HMfhBTdwzWqXfDZ6ZS2WTem3HIti CYrNvenIhfwQpAmzspCjTo6rXgExxKF96d++AescmmWUJRcA5LkqwI7HeBZkq4qb EcxDhF6SYkk= =AEyU -----END PGP SIGNATURE----- +------------------------------------------------------------------+ |Carl M. Ellison cme(a)cybercash.com http://www.clark.net/pub/cme | |CyberCash, Inc. http://www.cybercash.com/ | |207 Grindall Street PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2 | |Baltimore MD 21230-4103 T:(410) 727-4288 F:(410)727-4293 | +------------------------------------------------------------------+

1 0