December 2003 - cypherpunks-legacy

BosniaLINK
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

URL: http://www.dtic.dla.mil/bosnia/ BosniaLINK Banner Welcome to BosniaLINK, the official Department of Defense information system about U.S. military activities in Operation JOINT ENDEAVOR, the NATO peacekeeping mission in Bosnia. This system is provided by the Office of the Assistant to the Secretary of Defense for Public Affairs. All information in BosniaLINK is publicly released information from the U.S. government or NATO headquarters. BosniaLINK contains operation maps, fact sheets, news releases, biographies of key commanders and leaders, and transcripts of briefings, speeches and testimony. It is also hyperlinked to the NATO and State Department information services. _________________________________________________________________ Contents * Maps (Dec 8) * Fact Sheets (Dec 12) * News Releases (Dec 15) * Photos (Dec 15) * Biographies of Key Commanders and Leaders (Dec 15) * Transcripts of Briefings (Dec 15) * Speeches and Testimony (Dec 15) _________________________________________________________________ RELATED SITES FOR BOSNIA INFORMATION Air Force Role in Bosnia NATO U.S. State Department: U.S. Policy on Bosnia Navy News Service: Bosnia Operations _________________________________________________________________ BosniaLINK is provided through the cooperative efforts of the Office of The Assistant to the Secretary of Defense (Public Affairs), and the Defense Technical Information Center. This is a government computer system. _________________________________________________________________ DefenseLINK Home

3 2

Re: e-mail forwarding, for-pay remailers
by Andrew Loewenstern 17 Dec '03

17 Dec '03

E. Allen Smith writes: > There's one problem with this in regards to the "no necessary > connection," and that 's the governmental requirement for mail > forwarding. MBE and any legal other one will want to see at least > two forms of ID including one photo, and have a form that they fill > out using that and send to the local post office. Anyone have a > way around this problem? Why does an account provider need a snail-address and phone-number? Usually for billing purposes. However, this isn't necessary for accounts paid with ECash. I believe C2.org already offers non-dialup access accounts, paid for with ECash, that do not require a valid snail-address or phone-number. I am sure that there will be many more to come. andrew

1 0

Motorola Secure Phone
by dan＠milliways.org 17 Dec '03

17 Dec '03

I saw a new cordless phone made by Motorola in a retail outlet today that is supposedly "Secure from eavesdroppers." I asked the salespeople for more technical info, but they weren't very helpful. Does anyone have any information on this? I didn't notice any "Not for Export" stickers on the box, and the ITAR does cover spread-spectrum technology. So is it analog or digital? Is it just doing simple analog tricks, or is it encrypting a bitstream? Clipper maybe? I doubt it. Any info appreciated. Dan *************************************************************** #define private public dan(a)milliways.org Worcester Polytechnic Institute and The Restaurant at the End of the Universe ***************************************************************

5 4

"Strongly Voluntary" Key Escrow
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:18 PM 12/14/95, jim bell wrote: >I disagree. The issue is one that might be called "standing." Who, >exactly, is responsible to whom in such an arrangement. Let's suppose key >escrow (for keys for non-exported encryption devices) is REALLY VOLUNTARY. >In that case, the escrow agent's only legal responsibility is to the owner >of the encryption device. The government isn't a party to this voluntary >arrangement, and thus hasn't a complaint if the escrow agent refuses to comply. > >I could, for example, enter into a voluntary arrangement with an escrow >agent so that he would be obligated to erase the key no more nor less than 5 >days after he received it. If he did so 1 day after, and I needed the key, >he would have breached his obligation to ME, but not to the government. >Likewise, if he failed to erase the key, he would likewise be breaching his >agreement with me. I agree with this analysis. When key escrow was being debate in the summer of '94 here, I called this criterion the basis for a "strongly voluntary" system. Specifically, that one could have the bit bucket as an "escrow agent," with of course no retrieval by the government. Or one's lawyer, or one's spouse, or an offshore bank, and so on. All of these are "voluntary" key escrow (though I hate that misuse of the word "escrow") systems. None of them involve government certification, and there are few circumstances where I think "government certification" is even useful, let alone necessary. Any scheme in which the government interjects itself in what would not normally involve them can hardly be said to be strictly voluntary. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

1 0

Re: OSF security announcement
by Rich Salz 17 Dec '03

17 Dec '03

There are two or three dce-web folks on this list, so if anyone has questions after reading the web pages (http://www.osf.org/www/dceweb) drop me a line or post. /r$

1 0

Re: mailing list
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

On 15 Dec 95 at 1:13, JerelRobertson wrote: > Hey I want to get on this list. How do I do it? There's a test, Jerel. You may retake it in three months. We

1 0

simple Unix CPU time quantization functions available
by Matt Blaze 17 Dec '03

17 Dec '03

I've made available a simple CPU time quantization package that provides a simple interface to encapsulate code blocks that must run in a multiple of a coarse-grained "quantized" amount of CPU time. It is useful in building various on-line cryptographic protocols in which an attacker could otherwise learn key information by observing the time the target takes to perform calculations that use the secret (c.f., Paul Kocher's recent attacks). The basic idea is that you can specify a "quantum" such that at the end of an encapsulated block the CPU will busy-wait until the next quantum multiple. Fine-grained (below the quantum) timing information is thereby denied to the observer (including unprivileged processes on the same machine). The code is quick-and-dirty and only runs on Unix-centric platforms. Test and use at your own risk. There are (basically) no restrictions on the use or distribution of the (very simple) code. Get it from: ftp://research.att.com/dist/mab/quantize.shar The quantize package is also part of Jack Lacy's cryptolib package (watch this space for details). -matt

1 0

Re: e-mail forwarding, for-pay remailers
by Duncan Frissell 17 Dec '03

17 Dec '03

At 01:20 PM 12/14/95 EDT, E. ALLEN SMITH wrote: > The more critical question is likely to be what the people at the local >MBE/whatever _think_ the rules are. When I last got a box (under my real name, >in case anyone's wondering), I seem to recall that they'd accept credit cards. >Once one has one box under a given name, this opens up the possibility of >getting a secured credit card to make future access easier. However, I believe >that they do want at least one form of photo ID; I can't remember just off what >their specifications were. > -Allen I have found that credit cards are very good ID (even though they aren't ID at all) since people are sure that you can't get one without getting thoroughly checked out. A secured credit card in a nome de guerre backed up with employment photo "ID" will usually get you what you want. The reason that market access controls like these break down is that they are dependent on every seller on earth giving up the profit involved in selling to you. Sellers are different. You can usually find one who doesn't check ID well or is in another jurisdiction (in the case of non physical transactions). A new effect is the spread of libertarian (small L) political ideologies which means that a growing group of market participants are philosophically opposed to traditional control regimes. Eg C2.ORG. A final problem for control freaks is that Friction Free Capitalism is eating away at the traditional market institutions that have grown up during the control era. Thus if traditional banking, telephony, and electricity distribution are wiped out by new forms of competitive business activity it is hard for regulatory agencies to extend their traditional controls to the new entities. Budget restraints play a part as does inertia. All of this is before the new market players deploy anti control technologies and procedures. They are in business because they can displace traditional quasi-monopoly institutions and often see government as just another competitor to be bypassed. DCF

1 0

Re: ADDRESS DATABASE? [getting noisy]
by Charles Gimon 17 Dec '03

17 Dec '03

Forwarded message: [Sandfort summer picnic invitation list deleted] > > > This took about a minute using a shabby consumer-level DB. > *Now* do you get it? > > > Hieronymous > Well, "information wants to be free", and all that stuff...

1 0

Re: ADDRESS DATABASE?
by andr0id＠midwest.net 17 Dec '03

17 Dec '03

> The best way to circumvent something like the below occurring is to have >your home phone number listed under a pseudonym with no street address listed - >and block out *69 and caller-id. If some entity wants your phone number, >give them your business number. Another "best way" is to make all calls that you want to be personal with a cellular phone. Most cellular systems don't send ANI and do not provide any type of billing information to the phone company. The number is also by nature unlisted and the only way to get it is by you or the cellular carrier. If the cellular carrier gives your number out without your permision or a court order they are in BIG trouble..

2 1